CVE-2017-17717

Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature.

Date published : 2017-12-17

http://openwall.com/lists/oss-security/2017/12/17/3