CVE-2024-4956

Summary

CVE-2024-4956 is a newly disclosed vulnerability affecting Sonatype Nexus Repository Version 3. An unauthenticated attacker can exploit this Path Traversal issue to read sensitive system files. The vulnerability permits the attacker to bypass security restrictions and access files outside the intended directory, potentially resulting in confidential data exposure. The affected software has been patched in version 3.68.1. It is crucial for users to update their systems promptly to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.