Nexus version 2.1.2 - Sonatype Nexus Repository / Best Practices - Sonatype Community

Nexus version 2.1.2

post by deepti.s.sharma on Apr 5, 2022

Hello Team,

We are using Nexus Repository version 2.1.2, can you please confirm, if this version having Log4J vulnerabilities impact? which we have recently seen.

Regards

Deepti

post by mfrost on Apr 5, 2022

Hi @deepti.s.sharma and welcome to the Community!

You can read more about this here but the short answer is that our software including Nexus Lifecycle, Nexus Firewall, Nexus Repository OSS and Nexus Repository Pro in versions 2.x and 3.x are NOT affected by the reported log4j vulnerabilities.

We still do advise keeping your software upgraded to the latest version.

post by mpiggott on Apr 5, 2022

Nexus 2.1.2 is 10-years old - we’ve addressed other security problems in the intervening years.

New & Unread Topics

Topic	Replies	Views	Activity
Nexus H2 repair steps for version 3.79	3	219	Mar 6
Application Health Check required permissions for role assignment	2	93	Mar 25
RAW Repository Powershell Helpfiles	1	78	Mar 2
Upgrade from 3.80 to 3.89 failed	1	190	Feb 5
Are there official STIGs or hardening guidelines available for Sonatype Nexus Repository?	2	121	Apr 23

Topic list, column headers with buttons are sortable.