A sensitive information disclosure flaw exists in Nexus Repository 3's capability read API. The vulnerability allows an account that has the nexus:capabilities:read privilege to retrieve the plaintext shared secret configured on a webhook capability. This secret is normally masked in API responses, so its exposure compromises confidentiality and could lead to credential compromise or unauthorized webhook execution.

The weakness affects Sonatype Nexus Repository 3 releases from 3.2.0 up through 3.95.x. All builds within that range are impacted, including the numerous interim releases listed in the provided CPE strings. The vulnerability is absent in versions 3.96.0 and later, where the fix was applied.

The CVSS score of 6.0 indicates a moderate severity, reflecting the potential for data leakage but not immediate execution of code. No EPSS data is available, and the vulnerability is not listed in CISA KEV, implying no broad exploitation reports yet. The likely exploitation path requires a valid authenticated session with the nexus:capabilities:read privilege, meaning attackers with user accounts or internal access could abuse it. Each request to the capability read endpoint will return the secret, making disclosure trivial once the privilege is obtained.