Threats tagged 'ghsa-wcg2-hr8x-qqgg'

Sonatype Nexus Repository 3 Pro has a vulnerability where it does not verify the local account status when users authenticate via configured SAML or OAuth2/OpenID Connect identity providers. This allows users whose local accounts are disabled or locked to regain access if they have valid credentials at the identity provider, receiving a new session with their assigned roles.