What’s Vulnerable › Vulnerabilities

CVE-2021-42568

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-11-02 · updated 2026-06-17

Description

Sonatype Nexus Repository Manager 3.x through 3.35.0 allows attackers to access the SSL Certificates Loading function via a low-privileged account.

Affected products

• Sonatype Nexus Repository 3: from 3.0.0 through 3.35.0

References

• https://support.sonatype.com
• https://support.sonatype.com/hc/en-us/articles/4408801690515-CVE-2021-42568-Nexus-Repository-Manager-3-Incorrect-Access-Control-October-27-2021
• https://support.sonatype.com
• https://support.sonatype.com/hc/en-us/articles/4408801690515-CVE-2021-42568-Nexus-Repository-Manager-3-Incorrect-Access-Control-October-27-2021

Get alerted when CVE-2021-42568 or the next vulnerability affects your stack