Unscored severity · published Apr 1, 2014
CVE-2014-2034
Unspecified vulnerability in Sonatype Nexus OSS and Pro 2.4.0 through 2.7.1 allows attackers to create arbitrary user accounts via unknown vectors related to "an unauthenticated…
–
CVSS
2.1%
EPSS
No
On KEV
Description
Unspecified vulnerability in Sonatype Nexus OSS and Pro 2.4.0 through 2.7.1 allows attackers to create arbitrary user accounts via unknown vectors related to "an unauthenticated execution path."
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Nexus · Sonatype
2.4.0; 2.4.0; 2.5.0; 2.5.0; 2.6.0; 2.6.0; +13 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2034
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2034
Vendor Advisory
http://secunia.com/advisories/57142
www.osvdb.org
http://www.osvdb.org/104049
www.securityfocus.com
http://www.securityfocus.com/bid/65956
Vendor Advisory
http://www.sonatype.org/advisories/archive/2014-03-03-Nexus
Vendor Advisory
https://support.sonatype.com/entries/42374566-CVE-2014-2034-Nexus-Security-Advisory-REST-API
More from Nexus
8.8
CVE-2020-10199
Sonatype Nexus Repository Remote Code Execution Vulnerability
8.8
CVE-2020-11444
Sonatype Nexus Repository Manager 3.x up to and including 3.21.2 has Incorrect Access Control
7.2
CVE-2020-10204
Sonatype Nexus Repository before 3.21.2 allows Remote Code Execution
4.9
CVE-2020-24622
In Sonatype Nexus Repository 3.26.1, an S3 secret key can be exposed by an admin user
4.8
CVE-2020-10203
Sonatype Nexus Repository before 3.21.2 allows XSS