Welcome to the Sonatype Support Knowledge Base
Announcements
- ★ codehaus.org Repositories Should Be Removed From Your Nexus Instance
- ★ Sonatype Data Research supplies reserved CVE CVSS scores
- IQ vulnerability information contains the Root Cause
- Commons-collections unintended execution in deserialization
- Spring-core unintended code execution in deserialization
- OpenSSL Heartbleed bug and Sonatype
Product Support Overview
Security Advisories
- CVE-2021-30635 Nexus Repository Manager 3 - Directory Traversal - 2021-04-22
- CVE-2021-29158 Nexus Repository Manager 3 - Sensitive Information Disclosure - 2021-04-22
- CVE-2021-29159 Nexus Repository Manager 3 - Cross Site Scripting XSS
- CVE-2020-29436 Nexus Repository Manager 3 and Nexus IQ Server - XML External Entities injection - 2020-12-15
- CVE-2020-13933 Nexus Repository Manger 2 & 3 - Shiro Authentication Bypass - 2020-10-15
- CVE-2020-24622 Nexus Repository Manager 3 - Sensitive Information Disclosure - 2020-09-15 See all 33 articles
General Product Tips & How To
- Why do nuget push commands authenticate yet still return a 401 response code?
- SAML integration for Nexus Repository Manager Pro 3 and Nexus IQ Server with Keycloak
- Error during SSO login "Authentication failed due to SAML error" after upgrading Repository Manager 3 or IQ Server
- SAML integration for Nexus Repository Manager Pro 3 and Nexus IQ Server with Auth0
- How to Install a Sonatype License File (.lic)
- 401 Content access is protected by token when accessing repositories See all 20 articles
Apache Maven Tips & Troubleshooting
- maven-release-plugin + nexus-staging-plugin + Maven 2.2.1 Server Credentials with ID not found
- What are the requests that Maven 3.x sends when deploying artifacts?
- Configuring Maven HTTP Wagon Detailed Logging
- HTTPS/SSL deploy fails with "Received fatal alert: bad_record_mac"
- Maven deploys fail with Java 7, work with Java 6
- Maven deploy works using plain text password, but fails if encrypted