# Sonatype Nexus Repository Manager 3 Vulnerability Advisory (Severity Medium)

**URL:** <https://community.sonatype.com/t/sonatype-nexus-repository-manager-3-vulnerability-advisory-severity-medium/4736>\
**Category:** Sonatype Nexus Repository\
**Created:** [August 11, 2020, 3:37pm UTC](https://community.sonatype.com/t/sonatype-nexus-repository-manager-3-vulnerability-advisory-severity-medium/4736 "2020-08-11T15:37:47Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![jhill](https://yyz1.discourse-cdn.com/flex047/user_avatar/community.sonatype.com/jhill/32/1347_2.png) [@jhill](https://community.sonatype.com/u/jhill)\
**Post date:** [August 11, 2020, 3:37pm UTC](https://community.sonatype.com/t/sonatype-nexus-repository-manager-3-vulnerability-advisory-severity-medium/4736/1 "2020-08-11T15:37:47Z")

</div>

An access control bypass vulnerability (CVE-2020-15868) has been discovered in Nexus Repository Manager 3. We have fixed the vulnerability in version 3.26.0

The vulnerability was discovered and reported by [nike.zheng@dbappsecurity.com.cn](mailto:nike.zheng@dbappsecurity.com.cn) from Dbappsecurity Co., Ltd.

See Sonatype’s KB article for more detail: [https://support.sonatype.com/hc/en-us/articles/360052192533](https://support.sonatype.com/hc/en-us/articles/360052192533)