<?xml version="1.0" encoding="UTF-8"?>
<VrdaData refvuldefversion="1.2" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://vrda.jpcert.or.jp" xsi:schemaLocation="http://vrda.jpcert.or.jp/feed/xsd/vrda_data.xsd">
  <VrdaDataProvider>
    <Name>JVN iPedia</Name>
    <URL>http://jvndb.jvn.jp</URL>
  </VrdaDataProvider>
  <VrdaDataSourceType>Advisory</VrdaDataSourceType>
  <Vulinfo revisionno="1" lang="ja" invalidated="false">
    <VulinfoID>JVNDB-2026-024829</VulinfoID>
    <VulinfoData>
      <Title>Sonatype Inc.&#12398;Nexus Repository Manager&#12395;&#12362;&#12369;&#12427;&#36942;&#24230;&#12394;&#35469;&#35388;&#35430;&#34892;&#12398;&#19981;&#36969;&#20999;&#12394;&#21046;&#38480;&#12395;&#38306;&#12377;&#12427;&#33030;&#24369;&#24615;</Title>
      <VulinfoDescription>
        <Overview>&#12522;&#12514;&#12540;&#12488;&#12398;&#26410;&#35469;&#35388;&#25915;&#25731;&#32773;&#12364;&#35469;&#35388;&#12456;&#12531;&#12489;&#12509;&#12452;&#12531;&#12488;&#12434;&#20171;&#12375;&#12390;Sonatype Nexus Repository&#12398;&#12518;&#12540;&#12470;&#12540;&#12450;&#12459;&#12454;&#12531;&#12488;&#12395;&#23550;&#12375;&#12390;&#35469;&#35388;&#24773;&#22577;&#25512;&#28204;&#25915;&#25731;&#12434;&#23455;&#34892;&#12377;&#12427;&#21487;&#33021;&#24615;&#12364;&#12354;&#12426;&#12414;&#12377;&#12290;</Overview>
      </VulinfoDescription>
      <Affected>
        <AffectedItem affectedstatus="vulnerable">
          <Lapt>cpe:/a:sonatype:nexus_repository_manager</Lapt>
        </AffectedItem>
      </Affected>
      <FactAnalysis>
      </FactAnalysis>
      <Related>
        <RelatedItem relationtype="self" origin="jvnipedia">
          <URL>https://jvndb.jvn.jp/ja/contents/2026/JVNDB-2026-024829.html</URL>
        </RelatedItem>
        <RelatedItem relationtype="alternate" origin="other">
          <Name>Common Vulnerabilities and Exposures (CVE)</Name>
          <VulinfoID>CVE-2026-3329</VulinfoID>
          <URL>https://www.cve.org/CVERecord?id=CVE-2026-3329</URL>
        </RelatedItem>
        <RelatedItem relationtype="alternate" origin="other">
          <Name>National Vulnerability Database (NVD)</Name>
          <VulinfoID>CVE-2026-3329</VulinfoID>
          <URL>https://nvd.nist.gov/vuln/detail/CVE-2026-3329</URL>
        </RelatedItem>
        <RelatedItem relationtype="alternate" origin="other">
          <Name>Sonatype Support</Name>
          <VulinfoID>CVE-2026-3329 Nexus Repository 3 - Authentication Handling Issue - 2026-06-11  Sonatype Support</VulinfoID>
          <URL>https://support.sonatype.com/hc/en-us/articles/52482870409491</URL>
        </RelatedItem>
        <RelatedItem relationtype="reference" origin="other">
          <Name>JVNDB</Name>
          <VulinfoID>CWE-307</VulinfoID>
          <Title>&#36942;&#24230;&#12394;&#35469;&#35388;&#35430;&#34892;&#12398;&#19981;&#36969;&#20999;&#12394;&#21046;&#38480;</Title>
          <URL>https://cwe.mitre.org/data/definitions/307.html</URL>
        </RelatedItem>
        <RelatedItem relationtype="reference" origin="other">
          <Name>&#38306;&#36899;&#25991;&#26360;</Name>
          <VulinfoID>Sonatype Nexus Repository 3.93.0 - 3.93.2 Release Notes</VulinfoID>
          <URL>https://help.sonatype.com/en/sonatype-nexus-repository-3-93-0-release-notes.html</URL>
        </RelatedItem>
      </Related>
      <DateFirstPublished>2026-07-23T10:43:00+09:00</DateFirstPublished>
      <DateLastUpdated>2026-07-23T10:43:00+09:00</DateLastUpdated>
    </VulinfoData>
  </Vulinfo>
</VrdaData>
