CVE-2019-7238: RCE in Sonatype NXRM 3
Tags
cmtmf-attack-pattern: Code Injection
attack-pattern: Code Injection - T1540 Exploits - T1587.004 Exploits - T1588.005 Hardware - T1592.001 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID c12985bb-c6f8-4571-8064-b601651aa96c
Fingerprint ac871552c8b58b83
Analysis status DONE
Considered CTI value 0
Text language
Published March 14, 2019, midnight
Added to db Jan. 18, 2023, 9:02 p.m.
Last updated Nov. 14, 2024, 1:16 a.m.
Headline CVE-2019-7238: RCE in Sonatype NXRM 3
Title CVE-2019-7238: RCE in Sonatype NXRM 3
Detected Hints/Tags/Attributes 22/2/3
Source URLs
Redirection Url
Details Source https://blog.trendmicro.com/trendlabs-security-intelligence/cve-2019-7238-insufficient-access-controls-in-sonatype-nexus-repository-manager-3-allows-remote-code-execution/
Details Source https://www.trendmicro.com/en_ca/research/19/c/cve-2019-7238-insufficient-access-controls-in-sonatype-nexus-repository-manager-3-allows-remote-code-execution.html
URL Provider
Details Provider Source level domain
Details trendmicro.com www.trendmicro.com
Details trendmicro.com blog.trendmicro.com
Attributes
Details Type #Events CTI Value
Details CVE 6 
cve-2019-7238
Details Domain 1 
contentexpressionfunction.java
Details File 1 
contentexpressionfunction.java