CVE-2019-15588

There is an OS Command Injection in Nexus Repository Manager <= 2.14.14 (bypass CVE-2019-5475) that could allow an attacker a Remote Code Execution (RCE). All instances using CommandLineExecutor.java with user-supplied data is vulnerable, such as the Yum Configuration Capability.

• CWE-77
• CWE-78

• https://hackerone.com/reports/688270Issue Tracking, Patch, Third Party Advisory
• https://support.sonatype.com/hc/en-us/articles/360033490774-CVE-2019-5475-Nexus-Repository-Manager-2-OS-Command-Injection-2019-08-09Vendor Advisory
• https://hackerone.com/reports/688270Issue Tracking, Patch, Third Party Advisory
• https://support.sonatype.com/hc/en-us/articles/360033490774-CVE-2019-5475-Nexus-Repository-Manager-2-OS-Command-Injection-2019-08-09Vendor Advisory

Published

Nov 1, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-15582An IDOR was discovered in < 12.3.2, < 12.2.6, and < 12.1.12 …5.3
• CVE-2019-15583An information disclosure exists in < 12.3.2, < 12.2.6, and …7.5
• CVE-2019-15584A denial of service exists in gitlab <v12.3.2, <v12.2.6, and…6.5
• CVE-2019-15585Improper authentication exists in < 12.3.2, < 12.2.6, and < …9.8
• CVE-2019-15586A XSS exists in Gitlab CE/EE < 12.1.10 in the Mermaid plugin…6.1
• CVE-2019-15587In the Loofah gem for Ruby through v2.3.0 unsanitized JavaSc…5.4
• CVE-2019-15589An improper access control vulnerability exists in Gitlab <v…8.8
• CVE-2019-1559If an application encounters a fatal protocol error and then…5.9
• CVE-2019-15590An access control issue exists in < 12.3.5, < 12.2.8, and < …7.5
• CVE-2019-15591An improper access control vulnerability exists in GitLab <1…6.5
• CVE-2019-15592GitLab 12.2.2 and below contains a security vulnerability th…4.3
• CVE-2019-15593GitLab 12.2.3 contains a security vulnerability that allows …6.5