Sonatype Nexus Repository Manager 3.x up to and including 3.21.2 has Incorrect Access Control.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11444
Reference (s):
- https://support.sonatype.com/hc/en-us/articles/360046133553
- https://support.sonatype.com