Deployment credentials on the Nexus Repository Manager have leaked in GitHub. The issue received broad attention when a vulnerability report was submitted in mid-February. The credentials were encrypted, however, the master password was leaked as well. Although the master password wasn’t stored in plain text, it’s relatively easy to decode and can then be used to decrypt the other credentials. By Johan Janssen
Deployment credentials on the Nexus Repository Manager have leaked in GitHub. The issue received broad attention when a vulnerability report was submitted in mid-February. The credentials were encrypted, however, the master password was leaked as well. Although the master password wasn’t stored in plain text, it’s relatively easy to decode and can then be used to decrypt the other credentials.
By Johan JanssenRead More
