Sonatype Nexus Repository Manager 3.x up to and including 3.21.2 has Incorrect Access Control.
mitre·CWE-276·Published 2020-04-02