{"id":"CVE-2020-15012","details":"A Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.19. A user that requests a crafted path can traverse up the file system to get access to content on disk (that the user running nxrm also has access to).","modified":"2026-07-08T16:27:13.484515Z","published":"2020-10-12T21:15:13.010Z","references":[{"type":"FIX","url":"https://support.sonatype.com/hc/en-us/articles/360051068253"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/sonatype/nexus-public","events":[{"introduced":"0"},{"fixed":"c387fd5e0624d22d44193b5e51c7e4b553622565"}],"database_specific":{"source":"CPE_RANGE","cpe":"cpe:2.3:a:sonatype:nexus_repository_manager:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"2.0"},{"fixed":"2.14.19"}]}}],"versions":["release-2.14.16-01","release-2.14.15-01","release-2.14.14-01","release-2.14.13-01","release-2.14.12-02","release-2.14.11-01","release-2.14.10-01","release-2.14.9-01","release-2.14.5-02","release-2.14.4-03","release-2.14.4-02"],"database_specific":{"vanir_signatures_modified":"2026-07-08T16:27:13Z","vanir_signatures":[{"signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"plugins/security/nexus-ldap-realm-plugin/src/test/java/org/sonatype/nexus/NexusLdapTestSupport.java"},"deprecated":false,"digest":{"line_hashes":["86981555547745712411182944570340080357","138898036409421196506122450431295122109","9591357287506367380770753623328129533","28310614099614702653866932294870109317","133729019490604691503466611371147003399","223274146186421459126887867514261033510","324597800782793452274240808311126162503","165675747002161261255176703093156320685","597804094778853918532979370674950274","239048364920442053515469553151886960594","328922407652037623018865110540658016320","219210566278897287557369211458535096051"],"threshold":0.9},"id":"CVE-2020-15012-028ebb9d"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/maven2/M2GroupRepository.java"},"deprecated":false,"digest":{"line_hashes":["301439788949418071801766888321233665611","51596881030188640827758785251507549196","18267891371733978054075270005859714309","177943566918430938741632112539922720518","182728767708398219824312774627790455550"],"threshold":0.9},"id":"CVE-2020-15012-041c13f4"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"testsuite/legacy-testsuite/src/test/java/org/sonatype/nexus/testsuite/ldap/nxcm147/Nxcm147SavedPasswordConnectionJsonIT.java","function":"connectionTestWithFakePassword"},"deprecated":false,"digest":{"length":1707,"function_hash":"197144728641112435130326816728462123760"},"id":"CVE-2020-15012-056527d6"},{"signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/LayoutConverterShadowRepository.java","function":"storeItemWithChecksums"},"deprecated":false,"digest":{"function_hash":"43489160364973273438831955507108826918","length":1167},"id":"CVE-2020-15012-0808f08a","signature_type":"Function"},{"digest":{"function_hash":"308407641330048547694247496000257257799","length":111},"id":"CVE-2020-15012-0d4ca600","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/ChecksumContentValidator.java","function":"isChecksum"},"deprecated":false},{"deprecated":false,"digest":{"function_hash":"240645833721311142931188455201698130904","length":1698},"id":"CVE-2020-15012-10b055b4","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/test/java/org/sonatype/nexus/proxy/storage/remote/httpclient/HttpClientManagerTest.java","function":"enableCircularRedirectsForHosts"}},{"digest":{"line_hashes":["257463456077024846397483781880213451235","7829308363652557466283814297362189800","85522858717171682583471968426454723280","274512931955911907272747244466553149534"],"threshold":0.9},"id":"CVE-2020-15012-13846f08","signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"testsuite/modern-testsuite/src/test/java/org/sonatype/nexus/testsuite/routing/RoutingSanityIT.java"},"deprecated":false},{"target":{"file":"plugins/security/nexus-ldap-realm-plugin/src/main/java/org/sonatype/nexus/security/ldap/realms/test/api/LdapUserAndGroupConfigTestPlexusResource.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["337292999257030301995547166643228680045","66759614147349769575237312688118647888","130039926844918441426469041557339354073","2441115962179044294038702986940917231","67033778631094604664925120294731288518","147935754953463013180335811718389290611","302507516099481240891020680188249938979","2426180230470377667687938366976049923","303930312423146421718823081141445846952","128828440205874627595277229762924718368","156001098977200925507359159537656554090","19748843971831624905393684739387683081","74644176691881472348070729612989020243"]},"id":"CVE-2020-15012-13ef6881","signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"testsuite/legacy-testsuite/src/test/java/org/sonatype/nexus/testsuite/ldap/LdapConnMessageUtil.java","function":"validateResourceResponse"},"deprecated":false,"digest":{"function_hash":"101003615292824895442390968998071524867","length":755},"id":"CVE-2020-15012-14f536fb"},{"digest":{"function_hash":"11035438404365364036099939187894450413","length":168},"id":"CVE-2020-15012-1608e30e","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/metadata/AbstractMetadataHelper.java","function":"isChecksumFile"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/test/java/org/sonatype/nexus/proxy/maven/routing/internal/PrefixFileMaintenanceTest.java","function":"smoke"},"deprecated":false,"digest":{"function_hash":"129988666087693264849105626335599388371","length":1564},"id":"CVE-2020-15012-1bf1f23a"},{"id":"CVE-2020-15012-237b351f","signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/item/StorageFileItem.java"},"deprecated":false,"digest":{"line_hashes":["326225226513215630445271567868072375581","249573214258062310856769595045726590915","311756842035724899646730217714886884681"],"threshold":0.9}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"testsuite/legacy-testsuite/src/test/java/org/sonatype/nexus/testsuite/misc/nexus421/Nexus421PlainNotificationIT.java","function":"testAutoBlockNotification"},"deprecated":false,"digest":{"function_hash":"198856939401472080567237448991879447659","length":206},"id":"CVE-2020-15012-24fc3242"},{"target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/ArtifactStoreHelper.java","function":"deleteItemWithChecksums"},"deprecated":false,"digest":{"function_hash":"290906158836509266146758410588239185423","length":696},"id":"CVE-2020-15012-2b2c5eb5","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565"},{"digest":{"function_hash":"101283338499530007146936341591148463416","length":1236},"id":"CVE-2020-15012-2c0a6ade","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/LayoutConverterShadowRepository.java","function":"storeItemWithChecksums"},"deprecated":false},{"target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/AbstractMavenRepository.java"},"deprecated":false,"digest":{"line_hashes":["99109057245415287470135695439744855573","272259785650101010911863449701307896669","296695207463859093949599909174237720012","199370679815003495532844475995975328864","115491053454603826089374399356737833559","242107353043417626903397687986924846888","297554225962656682955657675905949485613","108783495020780193937877768039812636779","283640119076228171809942575053593648388","245233299699582626556816202647071733970","212733937111923919687971645125554106653","159264405149249818947408178100875248594","314399604238007328121826679024319395098","224631463108357843873772338070590670295","131338916708594296157036330549790614220","233176976731670399305079469861169137424","285044491256902285120125659265123154883","330841463093319782545281353107524281509","185013649149043120020058451806531147504","323433748713370473925746223093429102666","180096356527531021707154470979659311326","78725121005726426593413295975136918604","252451386087528687749656224597780543498","228543432120182957020968383127754312224","25504926725289912221251041531168911182","269323889399306338824816591008149127221","326523650584286265903969437139269972951","170419635722723815091129809055515531051","218297030592094573725100875450234298354","11336384457911805289601703584319843652","321955050440010069597508241972763595688","323385889832445509333565305146571426749","176773529341089651450917946809872717789","264319207579003813736572683729431549402","144632749963838454858397493191057821044","71631882984639626624143975870698017041","19665002506619547331514581304391129977"],"threshold":0.9},"id":"CVE-2020-15012-2e52968c","signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565"},{"signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"testsupport/nexus-test-harness-launcher/src/main/java/org/sonatype/nexus/integrationtests/MavenVerifierHelper.java"},"deprecated":false,"digest":{"line_hashes":["36154398710401179399469910237234268179","217567070303244386307500693940184436339","337783925376695354837115980903317907964","153154282570817578589685481857037028730","17887781169321301513167116959678423242","48315428543199646586774622377406514372","122826859664113519752828357231254059282","17987084197544495331682315440727060422","86434469051012956011969367594849678931","205579455564456532580505916844059046793"],"threshold":0.9},"id":"CVE-2020-15012-2fbb8d5c","signature_type":"Line"},{"id":"CVE-2020-15012-2ff67605","signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"testsuite/legacy-testsuite/src/test/java/org/sonatype/nexus/testsuite/ldap/LdapConnMessageUtil.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["139934212747441389806426012380887799349","67524143792404717612843240931359702344","279465435993179851396690510459637459535","50318463267833572003265280927093848397","231176317664927998953537167388663124844","39335967146356048659080498349485362096","19386847325197134851414902251331675988","165675747002161261255176703093156320685","23194090733627716654988184243967695364","226783710525870938612684730305950665737","169825404873750845532206862546652576311","289795353060690574323898009471965894448","134758790663708844773445237749298673582"]}},{"deprecated":false,"digest":{"function_hash":"257946550852760892970323612171621696662","length":966},"id":"CVE-2020-15012-3390350e","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/AbstractMavenRepository.java","function":"storeItem"}},{"id":"CVE-2020-15012-35d4a537","signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"testsuite/legacy-testsuite/src/test/java/org/sonatype/nexus/testsuite/misc/nexus421/Nexus421PlainNotificationIT.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["82043193627118365738721614218741014049","233505075427726163236578551303599933726","160225661867460296192691436462730130273","39368266603541639483119902965822827303","122862609624316651976756847192494008380","56884259973345046302569446433236076206"]}},{"signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"function":"maybeGetFromContext","file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/attributes/inspectors/DigestCalculatingInspector.java"},"deprecated":false,"digest":{"function_hash":"259360113553897386309832253153707152406","length":453},"id":"CVE-2020-15012-3a9e8b85","signature_type":"Function"},{"deprecated":false,"digest":{"line_hashes":["44103658024466109520663259511758204700","5182982591844288057918468589148360377","165722336973055065094828951317987049256","136037594182216190799582714919885214910","267361895918386439390618250924554956133","140192260631692863447754891321996524256","86033426418247168889575526290228050674","76995759372529742540174107389388095397","241454158443030366545037134852106079745","3157898033283847039875479392080512186","118782464630581564426898860439539332419","157274072646465477523158216480540904421","337022758785407217992062281987845464480","122538669567671617581088219841605921692","199390101286216014270295637647729471814","253238533980495192973837750495585014728","238074422151601444025989204273250490446","108245687688522174307236762987252648972","277901136001058571507981402433607765494","51053288662586684114172996500600155337","283281817440753462373796457686211760073","255462850935867372288453835100019433544","69704018596648077940136434890908955321","67685131695077019994577583556783422792","173864071663483441957626556499112640948","303926319903844591954727144502656065952","298886195797275120892286455474421770126","128570326097039629217413429952759025090"],"threshold":0.9},"id":"CVE-2020-15012-3c1cd785","signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"plugins/security/nexus-ldap-realm-plugin/src/test/java/org/sonatype/nexus/security/ldap/realms/api/LdapConnNotConfiguredIT.java"}},{"signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"testsuite/modern-testsuite/src/test/java/org/sonatype/nexus/testsuite/routing/RoutingSanityIT.java","function":"prefixFileIsUnchanged"},"deprecated":false,"digest":{"function_hash":"144936699398848969791316712941652340215","length":548},"id":"CVE-2020-15012-3df931e6","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"134566492653270991099057408220820708257","length":295},"id":"CVE-2020-15012-469c3cff","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/item/ChecksumReconciler.java","function":"shouldAttemptReconciliation"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/metadata/AbstractMetadataHelper.java"},"deprecated":false,"digest":{"line_hashes":["223980493336271259424779603115692748687","86796541484881088357566515235672029888","118749108369872965364613080507549765233","158180674492770376804122735421473961148","49541591283519932360064535859133592240","223008507847824948826648199719328059178","200752490482230012353050587765585226559","276695395194291027569323840379922119677","304144654213386834332989756903076157679","301967075112976040782752815358226348407","216007002428496155549201191806057468215","42973463113964275962516994466128284984","298586691859252510256456058080367893176","148536977143378054607640572325557454938","184290596539571001358153877633642456553","9729009909779991017128203387696656801","15532333744988218082875104023836518198","264583544183879883180571811862631012646"],"threshold":0.9},"id":"CVE-2020-15012-58fb7174"},{"signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/test/java/org/sonatype/nexus/AbstractMavenRepoContentTests.java","function":"copyDirectory"},"deprecated":false,"digest":{"function_hash":"279819851965424168286033273962311937964","length":737},"id":"CVE-2020-15012-59fa641a","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"testsuite/legacy-testsuite/src/test/java/org/sonatype/nexus/testsuite/ldap/nxcm147/Nxcm147SavedPasswordConnectionJsonIT.java"},"deprecated":false,"digest":{"line_hashes":["74179706170281141230376085081082265180","36693244957217804737486804362938525051","337643687695277597047954489411940345143","92763156934023304283378294217805360370","270651083374382457646221777931518676414","7502852390957789235349783799939373635","323984737538619261898432573536166842675","113043931424672195455835905456619129745","266511832789923797284914959172639599262","304940779241804395477713647011259707465","18815932684901283801880708772897418765","330491711938744386923006719634684791750","181209977201239431242281415364733883911","280260954177987407139486987489677316274","317001699359179359176271919493263519549","171554684416689929828854871821971439642","221933175003893593848791162218709177658","177849041328087435130823217776999701580","111733155060746791745808660723730824413","20950798054990369303651588996938909541","150118516822137992769882710507046423112","214534501030951139691342588279705786098","324252417402762074314195577997416149878","229758330699517025137931255020120731006","140160160000368531763574643171684163074","106054354303777795797143277275104440494","138006269496862630324060733165536701729","315273031432540774741158686399364817145","262819312484220082591326304971578016437","317689722580633724864191746411749774308","114117274146098685441340849257771721507","34625166226166952217770976091321669361","328059786183944695664939154302806217660","182888432165571502800687478115507939947","149713793178788264154888654775527798771","154037816546582310914940259490152672043","169993274886093128252394072849843837570","152641976418603597793211154769354027267","89810989154911024585567571106614756361","203397140537842285078680698862203905108","30206969724119143494141558096926651297","217041798296148770804470453324069163047","289773539901831041864322127177223911478","47609959695300125555359722268805212249","222649024755598456809448193426914284675","338964087336250609161902249707830215848","93473392554369397833630464863448562840","100948127884780555046071597471515249100","198578653356781033885523241270761227272","287123487886482564784395066883872398446","249205317071617064703936053884855758417","98530973597863056403969103259345921715","144800284959161927663057149655147183201","324993567668287324268482018491203414537","210115317981845178065587631705923666300","41762135645271798089029657691633757663","246010311257001523677690539119324559636","149680349826640528483354740481254459251","295958898636203222170370142042736583295","112959108159432535240963066919104011782","136835372863226888815960548179064599628","132968182824584386265149634579489616877","223331655419663464424058138021793719075","230013571174223386357946587566661952273","47886915471525204117347440069175249354","157810709699638366236228578991097412232","128475391053680046908207143486095171959","191590770875640093210518583243713252050","87765331679472814264490347862391778069","88214371464932225431668766052906442240","310896095783956339832253451084204737896","319042862204368343363416999772693323787"],"threshold":0.9},"id":"CVE-2020-15012-5c3f2b17","signature_type":"Line"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/test/java/org/sonatype/nexus/proxy/storage/remote/httpclient/HttpClientRemoteStorageTest.java"},"deprecated":false,"digest":{"line_hashes":["236531211909953826035585792587243477514","18072328923966546229035553277661375259","256556702301359487253913145703288083935","276969776425164833351334127357063407339"],"threshold":0.9},"id":"CVE-2020-15012-5d068053"},{"digest":{"function_hash":"21037904392877119757578443232407071428","length":1418},"id":"CVE-2020-15012-64ae333d","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/gav/M2GavCalculator.java","function":"pathToGav"},"deprecated":false},{"source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/AbstractMavenRepository.java","function":"expireRemoteHash"},"deprecated":false,"digest":{"function_hash":"4598907051185119526827653902677892989","length":650},"id":"CVE-2020-15012-6749ca25","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2020-15012-69d3e824","signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/item/ChecksumReconciler.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["61351833221685255427309885003946551045","321989845293492045117558395775956893367","26204943915258536296413079617783197233","205650862735654989415836053427754571552","115491053454603826089374399356737833559","83775708877378476482621404722931139744","74587707846914926109084185211177306364","230554647232121130958283414622606605322","227416306940080779155542453813592052328","143784619787658207207572038126849611731","117156087481578061118753625483360314680","185611965792592331140800936788371319011","105931892845479340259781317097045325023","172447148861571776755917191258330951226","41839365622580664855743772349607382956","255759196175932503474678183601836566125","34436872984214375615129649131825941708","149625256280166855618819653661006068295","140877223473868403070425366649738420633","82699955003909814612500424648129820459","51813425734456194876418503093948752872","323674750790744603479429373057464871078","63326847780149482454556631858936907975","235051824400440898663543686078966773179","16438241701378392695849460312692073246","190059205769378980395676116097007065485","233674999012340684812701231348498188325","126644157397099979868420484151157169818","37191838501922155671263638433869518689","197364285193273606257924359119538184552","147427581003152294773817830328065840637","199336458651303758922177250865645636923"]}},{"deprecated":false,"digest":{"function_hash":"284332799805972758704557679658441423358","length":111},"id":"CVE-2020-15012-6afc883c","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"testsuite/legacy-testsuite/src/test/java/org/sonatype/nexus/testsuite/ldap/nxcm147/Nxcm147SavedPasswordConnectionJsonIT.java","function":"init"}},{"digest":{"line_hashes":["317434635592425619092749413560515552991","69972679956129330505502253883661476944","147597623922711815961508530157502071710","80639375334472642259760116926786333366","250691930426526372693436276340461849502","133285997528047672967987959732986392327","147015487538782627096314478141113081599","317790893909056780104160593356403786250","54484807932775396982806822580967957887","30651528467597897582037398410374083719","265957466780214239752694870781777178725","172439405611398557457397903027301826925","145937472374362344822754399618522064949","12890961580078443035847369205221454933","263391163391691003223453257460143319035","324160770749570441427204113943587313652","299525049116512443123614584865198361710","184937887625033912545329680113919267141","329841598437598865971584343530218158897","111985310899680028321976152282057781412","34358181176939317155008898778128897597","35369056117837198075214668751790014883","180320113949330583715076176312452331470","21334913724961883159678878151750909991"],"threshold":0.9},"id":"CVE-2020-15012-6b453481","signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"plugins/basic/nexus-webresources-plugin/src/main/java/org/sonatype/nexus/webresources/internal/WebResourceServiceImpl.java"},"deprecated":false},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/storage/local/AbstractLocalRepositoryStorage.java"},"deprecated":false,"digest":{"line_hashes":["292809656828839106996948824207434299422","90685968782667713470535390505885569891","91948851720111834521342288060064027026","293654644689906226973265773594376664953","67326856156100157260213574037978974191"],"threshold":0.9},"id":"CVE-2020-15012-6c3862ba"},{"signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"function":"doListItems","file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/AbstractMavenRepository.java"},"deprecated":false,"digest":{"function_hash":"75208196530762018995155066954139874060","length":554},"id":"CVE-2020-15012-7066eec1","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"function":"doRetrieveItem","file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/AbstractMavenRepository.java"},"deprecated":false,"digest":{"function_hash":"266623080897536243957427640363090676550","length":855},"id":"CVE-2020-15012-74894495"},{"target":{"function":"processFileItem","file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/repository/ExpireCacheWalker.java"},"deprecated":false,"digest":{"function_hash":"248993093782656698032405290664165518602","length":399},"id":"CVE-2020-15012-763b3ab9","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565"},{"id":"CVE-2020-15012-77c72b80","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/test/java/org/sonatype/nexus/proxy/maven/metadata/RecreateMavenMetadataWalkerIT.java","function":"testRebuildMavenMetadataIsSmarter"},"deprecated":false,"digest":{"function_hash":"282487950043414812479683804799909999819","length":1502}},{"digest":{"line_hashes":["108675323797007672727584691432860562141","157312188354511983101662387100523655668","259064473162242943146616792775458007682","230143896281713998287682947931934623505","296607172503953264894603673795011544830","285566451481750391854787760492780221922","5404590634381254422429080905050415150","53157141056172520496398973624277568667","198920621941034066595226442359421364310","159925655839845817460022346016177890328","170879360065772514744883855176287727688","182519537589804480974324549004304479496","229048648952710909830464452484208488489","65777417757572151662336932127955069525","162576564686176780048563472422625824853","116438035451317893719955246785509338065","267998587097895209944121686926981559739","266736393216566573695760671102889869567","170879360065772514744883855176287727688","182519537589804480974324549004304479496","229048648952710909830464452484208488489","65777417757572151662336932127955069525","162576564686176780048563472422625824853","27008483833921507148990219808626768911","160910829257633599858586960751097426162","111376702289381891874597651738612206149","157312188354511983101662387100523655668","259064473162242943146616792775458007682","230143896281713998287682947931934623505","289153424820106808059887713754784117145","196442759897203684308853301542380029658","63537408977980243634346969509290353819","2659179180906924929466188589497856091","147445907589748690073639241486079650191","117289741539693632636280953885944776409","109129708281750852571357041747133423137","265170018526739149992633593849268035803","286142950576406459727285838765764427857","129959103541515752330963602025829271457","108044360171260644485387973629606235911","115475566799830774787058316662053713388"],"threshold":0.9},"id":"CVE-2020-15012-798b8067","signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/test/java/org/sonatype/nexus/proxy/maven/routing/internal/PrefixFileMaintenanceTest.java"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/attributes/inspectors/DigestCalculatingInspector.java","function":"processStorageItem"},"deprecated":false,"digest":{"function_hash":"247582916578462449422327256622079156382","length":538},"id":"CVE-2020-15012-7e0cc1bc"},{"digest":{"function_hash":"107138405989713427110103625781358342629","length":2820},"id":"CVE-2020-15012-7e3badf0","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"function":"doRetrieveMetadata","file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/maven2/M2GroupRepository.java"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/gav/M2ArtifactRecognizer.java"},"deprecated":false,"digest":{"line_hashes":["245964056492360711039270380620012119526","23914804904494017148729200299746644906","26965558018217060902977209617908990369","275111352447090362131419612478708249484","311508805247876004300359907414712504175","227850602291657932579884619685002555666","332279720737452381443193747595428101946","67206965264012490237741187105028098847","94579838176531057503375200287593222109"],"threshold":0.9},"id":"CVE-2020-15012-7fca8641","signature_type":"Line"},{"digest":{"line_hashes":["240359738400849447546566100606448628291","275303409396916704651989042272017123914","2534043049817534286486183165390587145"],"threshold":0.9},"id":"CVE-2020-15012-7fee1a15","signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/metadata/DefaultMetadataHelper.java"},"deprecated":false},{"source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"plugins/indexer/nexus-indexer-lucene-plugin/src/main/java/org/sonatype/nexus/index/NexusScanningListener.java","function":"artifactDiscovered"},"deprecated":false,"digest":{"function_hash":"68062158392748699757066762255897662064","length":532},"id":"CVE-2020-15012-893f76eb","signature_type":"Function","signature_version":"v1"},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/LayoutConverterShadowRepository.java"},"deprecated":false,"digest":{"line_hashes":["255611600302113773778922728822127888407","330596483500464419195794786942816567582","39515036656635877200313855274404202958","292176789652870357798933800146712953298","12639127836553727994050816309347444244","323477644644739327442021210528572097668","64080418696525081989601553355603298060","166668641781602498352803306362971380497","333955015325189395764253415726765818444","307093475989516506973790163957401032766","7439852233880009710928311267452096772","112210200090733819291545716171925909999"],"threshold":0.9},"id":"CVE-2020-15012-8eb3a97c"},{"deprecated":false,"digest":{"function_hash":"213192425349250113544587698998596760416","length":606},"id":"CVE-2020-15012-91304da3","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"plugins/security/nexus-ldap-realm-plugin/src/main/java/org/sonatype/nexus/security/ldap/realms/api/AbstractLdapRealmPlexusResource.java","function":"restToLdapModel"}},{"signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/test/java/org/sonatype/nexus/proxy/storage/remote/httpclient/HttpClientManagerTest.java","function":"useCookiesForHosts"},"deprecated":false,"digest":{"function_hash":"280974540491874418763583610621608211711","length":1760},"id":"CVE-2020-15012-920690ce","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/gav/Gav.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["263008349508375224162011144499012560016","301813773036967903693371504515577037790","38547362840639035571466663811389070579","90007857307651895065775547564097693337"]},"id":"CVE-2020-15012-9b7922a2","signature_type":"Line"},{"deprecated":false,"digest":{"line_hashes":["108539710826121352659696331655139536325","86816943886073349311338212461300417680","290002051156040277397784510117053780689","240149073512657664781504987404184667719"],"threshold":0.9},"id":"CVE-2020-15012-a12a59b6","signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/test/java/org/sonatype/nexus/AbstractMavenRepoContentTests.java"}},{"deprecated":false,"digest":{"line_hashes":["313652728092155124131652578897596951363","75552395171418087663321023820132818466","80308844729590517458752855001488350267","241298378827831399649577271181318244136"],"threshold":0.9},"id":"CVE-2020-15012-a3184a2d","signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/test/java/org/sonatype/nexus/proxy/RepoConversionTest.java"}},{"deprecated":false,"digest":{"function_hash":"198583239625575802226328120267717584706","length":2454},"id":"CVE-2020-15012-a79f8fe3","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/maven2/M2Repository.java","function":"doRetrieveItem"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/ArtifactStoreHelper.java"},"deprecated":false,"digest":{"line_hashes":["330027596785580232179607495987560586234","236650000594654856921774657620665797986","171173733998609763941867808229790185444","129745736836239532158463051021606421709","50607270025727699257943256756555103863","199429638806007158766216008979046039113","282148840042880094301373984736586157352","39515036656635877200313855274404202958","18073838456680646021303582967561994850","146588267321982724099808949577954892121","77915100324871815369858181336779132813","105552502910526552317808263375720525917","104685592503260264690038466604951612747","15778450921201501078524227530277679037","12639127836553727994050816309347444244","1172701452042997473000967596616162246","228878153113641432736943386053300856225","73957601755118208492248242477930519786","138076065799216114080643565016604690788","118577982476179761658043272374736447041","304858399555833416692125591796222247624","333033747680973226431474719411207671694","121466462285441111123779518352403566669","307255890858974472669987612749744605154","130828629295823731184050140426940965011","258572328505878060634183503555919328614","203390422331135164456998239784737166501","168575058779568150635397803825533431696","166668641781602498352803306362971380497","333955015325189395764253415726765818444","211819845779368161878269392061720848328","301182207980130769308203140429921478729","288421860021939946093563465657055785680","5235999675676244755092409406773899897","100944156522804853008978841693858854591","143591312545945087883350835196658432888","7439852233880009710928311267452096772","61657680755830218945550692303567638909","270829980750267840417182500458029228650","149571674848996138491669603403339910451","337227329810528390227158700724853725225","84087250072561196140458797685332429210","221352369892993902720905399761406446879","333033747680973226431474719411207671694","121466462285441111123779518352403566669","221863232551324732336434266347390691953","201245875889394625032854763449993229815","325229760262001823353297946410353604001","17210562011495993472941320718407077649","309763002654439885615315867766683219412","4600613198899571483001216922822967747","77502847484047751086214891503747060612","21843825132763449435489486758967186470"],"threshold":0.9},"id":"CVE-2020-15012-ab6147b2"},{"signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"plugins/security/nexus-ldap-realm-plugin/src/main/java/org/sonatype/nexus/security/ldap/realms/test/api/LdapUserAndGroupConfigTestPlexusResource.java","function":"getConnectionInfo"},"deprecated":false,"digest":{"function_hash":"213192425349250113544587698998596760416","length":606},"id":"CVE-2020-15012-aea258e9","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"296879801988631505329830591819394223429","length":609},"id":"CVE-2020-15012-af446d10","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/storage/local/AbstractLocalRepositoryStorage.java","function":"prepareStorageFileItemForStore"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"function":"storeItemWithChecksums","file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/ArtifactStoreHelper.java"},"deprecated":false,"digest":{"function_hash":"89536978137712165026069903053138794017","length":1280},"id":"CVE-2020-15012-b5bc223b"},{"deprecated":false,"digest":{"function_hash":"303080622594029168253445016926768212966","length":103},"id":"CVE-2020-15012-b9800d7d","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/gav/M2ArtifactRecognizer.java","function":"isChecksum"}},{"deprecated":false,"digest":{"function_hash":"44680511609474172365069035319356101385","length":1401},"id":"CVE-2020-15012-b9c32f02","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/test/java/org/sonatype/nexus/proxy/RepoConversionTest.java","function":"convertHosted2Proxy"}},{"id":"CVE-2020-15012-bb89f188","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"plugins/security/nexus-ldap-realm-plugin/src/test/java/org/sonatype/nexus/security/ldap/realms/api/LdapConnNotConfiguredIT.java","function":"testSetPasswordToFake"},"deprecated":false,"digest":{"function_hash":"108500223281409146019305035057406391499","length":771}},{"deprecated":false,"digest":{"line_hashes":["163212254711802961070530948097851928010","305646790508256715140639710974346455271","66669802531649630560301918838987852958","275208106455913961433031144989198799093","244364721930211489612134259814422075601","46344158331835727712661652665592127340","91948851720111834521342288060064027026","107513598252481440121630161373417508362","305567931013586319542072222916450030356","26370910894308075140609707039217750024","161346933532441095368937286313166273989","155916695144744019141286730345362708631"],"threshold":0.9},"id":"CVE-2020-15012-bba5f791","signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/attributes/inspectors/DigestCalculatingInspector.java"}},{"source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"testsuite/legacy-testsuite/src/test/java/org/sonatype/nexus/testsuite/p2/AbstractNexusP2IT.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["287368276655180284869038877316923808104","97371735463767145816171830137553963059","74232037770447291550425508797409727055","8680744761148665961318336946404209515","188164282471286827070073082252442163110","218092425759497368720486118953813493468","336158656351160641407862554926511106874","196015033379296924224024635756873859215"]},"id":"CVE-2020-15012-be0146cb","signature_type":"Line","signature_version":"v1"},{"target":{"file":"plugins/security/nexus-ldap-realm-plugin/src/main/java/org/sonatype/nexus/security/ldap/realms/api/AbstractLdapRealmPlexusResource.java"},"deprecated":false,"digest":{"line_hashes":["105732598505126494730968126994249973236","5486727952625091785569061560646227169","26802220004424442769552865934949746844","89706019866321764821478914035592323550","302507516099481240891020680188249938979","2426180230470377667687938366976049923","254448962362602149670332302846941792623","148379250760639972240292922577561488661","325188647305976736770208098843764948054","292441688030371188746756674262591191351","134288337058826603750685886338816599626","255833137315742082294271631174665333027","19316709357196148287756445787288849473","297534156402927260252078887693327878714","273870472383021806250175286091104506890","152833066918038186165688582943319526249","104184821476952716407659788619231091551"],"threshold":0.9},"id":"CVE-2020-15012-c4912123","signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565"},{"signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/util/DigesterUtils.java"},"deprecated":false,"digest":{"line_hashes":["145526353044462187490997367451641450047","194207114789379821365225731904742303239","151836464972323216305531261411723355428","31462839900266279062353189055189057776"],"threshold":0.9},"id":"CVE-2020-15012-c53203c2","signature_type":"Line"},{"digest":{"function_hash":"141482858816590367538143224742830331263","length":1403},"id":"CVE-2020-15012-c7293d2d","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/test/java/org/sonatype/nexus/proxy/storage/remote/httpclient/HttpClientRemoteStorageTest.java","function":"checkRepositoryRemoteAvailabilityNeglectLastModified"},"deprecated":false},{"id":"CVE-2020-15012-d390403a","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"testsuite/legacy-testsuite/src/test/java/org/sonatype/nexus/testsuite/p2/AbstractNexusP2IT.java","function":"installUsingP2"},"deprecated":false,"digest":{"function_hash":"89353698924315526500952098661319940664","length":1394}},{"signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/test/java/org/sonatype/nexus/proxy/maven/routing/internal/scrape/NexusScraperTest.java"},"deprecated":false,"digest":{"line_hashes":["184802936127081329308963733765782224856","81192444720934503718542493967186493170","186178878927137068259956188214583784232","28636624238064231287944201102577507844"],"threshold":0.9},"id":"CVE-2020-15012-d4b6c5db","signature_type":"Line"},{"deprecated":false,"digest":{"function_hash":"108729461758954542317303554647844000305","length":1989},"id":"CVE-2020-15012-d555416b","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/test/java/org/sonatype/nexus/proxy/maven/routing/internal/LocalContentDiscovererImplTest.java","function":"smoke"}},{"deprecated":false,"digest":{"function_hash":"126853319637622976378514368888069866768","length":1111},"id":"CVE-2020-15012-d85e38cc","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/ArtifactStoreHelper.java","function":"storeItemWithChecksums"}},{"id":"CVE-2020-15012-d93a7758","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"function":"isMetadata","file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/gav/M2ArtifactRecognizer.java"},"deprecated":false,"digest":{"function_hash":"80570366683106995681636906936280526324","length":184}},{"source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"plugins/security/nexus-ldap-realm-plugin/src/main/java/org/sonatype/nexus/security/ldap/realms/api/AbstractLdapRealmPlexusResource.java","function":"ldapToRestModel"},"deprecated":false,"digest":{"function_hash":"255614087802833881110851642288705602787","length":488},"id":"CVE-2020-15012-da2e13a3","signature_type":"Function","signature_version":"v1"},{"id":"CVE-2020-15012-db8ce1dc","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/metadata/AbstractMetadataHelper.java","function":"rebuildChecksum"},"deprecated":false,"digest":{"function_hash":"156077116262262992297744168561920668066","length":402}},{"digest":{"function_hash":"192814437816093665836468680972031378884","length":710},"id":"CVE-2020-15012-dc86d593","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"plugins/security/nexus-ldap-realm-plugin/src/test/java/org/sonatype/nexus/NexusLdapTestSupport.java","function":"validateConnectionDTO"},"deprecated":false},{"source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/test/java/org/sonatype/nexus/proxy/maven/metadata/RecreateMavenMetadataWalkerIT.java"},"deprecated":false,"digest":{"line_hashes":["27306357464373213863842168513855089668","3878976505643664965731526745347395114","72708886424326413320450175028325335547","296920570952903402206980343305644718560","95327518881434209784009371601012412085","257233298876656722863057282157749007778","8000058734826461596164124804839362776","113446953756900171982239232935162535039","32060759788192883555865118155457918359"],"threshold":0.9},"id":"CVE-2020-15012-dc88486d","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/item/ChecksumReconciler.java","function":"reconcileItemChecksum"},"deprecated":false,"digest":{"function_hash":"75429989739516921300947177222466042261","length":1546},"id":"CVE-2020-15012-dddb510d","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/ArtifactStoreHelper.java","function":"deleteItemWithChecksums"},"deprecated":false,"digest":{"function_hash":"226854900619408322750878083375473761464","length":864},"id":"CVE-2020-15012-e03693b0","signature_type":"Function"},{"deprecated":false,"digest":{"length":330,"function_hash":"20860840110944025967962686365977150752"},"id":"CVE-2020-15012-e0845dfc","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/test/java/org/sonatype/nexus/AbstractMavenRepoContentTests.java","function":"directoryWalkStep"}},{"deprecated":false,"digest":{"function_hash":"114413816363063437889665174325975299799","length":414},"id":"CVE-2020-15012-e4475d9d","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/AbstractMavenRepository.java","function":"doExpireProxyCaches"}},{"deprecated":false,"digest":{"line_hashes":["76937787166610975614785287325581180696","47592977512203792220475622536246452690","261963528943652143194338839149025374878","81116282339286153062507326765973168649","76937787166610975614785287325581180696","47592977512203792220475622536246452690","261963528943652143194338839149025374878","8667927618148278804615146587360225262"],"threshold":0.9},"id":"CVE-2020-15012-e91c06a3","signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/test/java/org/sonatype/nexus/proxy/storage/remote/httpclient/HttpClientManagerTest.java"}},{"source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/AbstractMavenRepository.java","function":"doCacheItem"},"deprecated":false,"digest":{"function_hash":"276021365206078913555025029123583642151","length":228},"id":"CVE-2020-15012-f0f574be","signature_type":"Function","signature_version":"v1"},{"target":{"file":"components/nexus-core/src/test/java/org/sonatype/nexus/proxy/repository/AnAbstractProxyRepositoryRetrieveRemoteItemMethodTest.java","function":"prepare"},"deprecated":false,"digest":{"function_hash":"41263886927830044494100717784378712334","length":1804},"id":"CVE-2020-15012-f30795b6","signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565"},{"deprecated":false,"digest":{"line_hashes":["16500945813323814449835362205242917511","207582526188893082475654255150281755653","99423431276113497360266227782001943586","43901037432536308310903024669118364962"],"threshold":0.9},"id":"CVE-2020-15012-f3ca99f9","signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/test/java/org/sonatype/nexus/proxy/repository/AnAbstractProxyRepositoryRetrieveRemoteItemMethodTest.java"}},{"deprecated":false,"digest":{"line_hashes":["123512770349676466774902172648514419413","52724895648388157611204091469394947470","54099741594347837173710401120150857625","103261780380469854636004999423122879146"],"threshold":0.9},"id":"CVE-2020-15012-f4da06f2","signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/gav/M2GavCalculator.java"}},{"deprecated":false,"digest":{"line_hashes":["265164148932167145802190261599720054742","259501044808570771918592909634330561592","190953241120139972815604517008100417688","148820110041393429134299991625253753060","259948998411371929695621535447028367224","313653219444929105358757431821781930413","337761001251226313507464724408415136348","43416035102223860542376177995605543123"],"threshold":0.9},"id":"CVE-2020-15012-f59f38ea","signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/repository/ExpireCacheWalker.java"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"function":"ChecksumReconciler","file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/item/ChecksumReconciler.java"},"deprecated":false,"digest":{"function_hash":"174758009256294492061919759561806744945","length":220},"id":"CVE-2020-15012-f8bac255"},{"source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/test/java/org/sonatype/nexus/proxy/maven/routing/internal/LocalContentDiscovererImplTest.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["333680766669777502473133705581120029673","69502600114448889779056963594539415524","209159770912203561314356101628063589623","108524720081053723808501540465542705639","109586740807468504311114092761126037860","153844628515409802069223222849582550616","212281620393823021602915685463879389596","333680766669777502473133705581120029673","317359906500799767403850818726629419905","226039083171315582161858100484306093590","252039508976027107708641513161272971714","14377715236552690562392730117483039048","75898532504398956939785453769008247371","333680766669777502473133705581120029673","252078020531949078695475655104151927775","316969336431485951483298086245721493771","8365309238987075804864023238719094110","263694775467188269683385814617985980404","46145148944126492987956030637838837880"]},"id":"CVE-2020-15012-fae79190","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"plugins/basic/nexus-webresources-plugin/src/main/java/org/sonatype/nexus/webresources/internal/WebResourceServiceImpl.java","function":"getResource"},"deprecated":false,"digest":{"function_hash":"164654088292372414960404533136432847612","length":838},"id":"CVE-2020-15012-fc2e9b47","signature_type":"Function"},{"deprecated":false,"digest":{"line_hashes":["91002369872562464869308146195837982832","86157596907390129348638226443495318373","211757972371827173315310195612230809951","265905437433748042022111172076341122078","133907202877892273410848535759790701986","24732293010834477589112513698489559877","178148987290487792446781241069547681477","309328443805331344526696865128644940745","76453349036937725554821591325860872435","54920113965427676797736989113446169918","305697167457299451324453829206957847443","156556296589826330134508570263521841069","48233961081627896862029747020939330802","82255658603896346272568055445362485475"],"threshold":0.9},"id":"CVE-2020-15012-ff35797c","signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/ChecksumContentValidator.java"}},{"deprecated":false,"digest":{"line_hashes":["58375786179617974862297193916647151298","156806593080177095823938249424578507455","130550286053241693289858705672930401322","228174679147861886932445079457659116332"],"threshold":0.9},"id":"CVE-2020-15012-ff6defcb","signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565","target":{"file":"plugins/indexer/nexus-indexer-lucene-plugin/src/main/java/org/sonatype/nexus/index/NexusScanningListener.java"}},{"target":{"file":"components/nexus-core/src/main/java/org/sonatype/nexus/proxy/maven/maven2/M2Repository.java"},"deprecated":false,"digest":{"line_hashes":["116653710931182550266408071362548374826","108052378837705274555624025179448839058","143797585705193610605059057903433779336","206786173855272652277726170998015960614","46112429443977247620762668419428287169","240058002024000627774030774637669347244","229896130221953159601586820123916586658","324907236470658706720859211434200497750"],"threshold":0.9},"id":"CVE-2020-15012-fffa8e55","signature_type":"Line","signature_version":"v1","source":"https://github.com/sonatype/nexus-public/commit/c387fd5e0624d22d44193b5e51c7e4b553622565"}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-15012.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N"}]}