PT-2019-13892 · Jetbrains · Jetbrains Hub

Publicado 2019-10-01 · Atualizado 2019-10-08 · CVE-2019-14955

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions JetBrains Hub versions prior to 2018.4.11436

Description The issue concerns the lack of a password expiration policy and the inability to force users to change their passwords.

Recommendations For versions prior to 2018.4.11436, update to version 2018.4.11436 or later to implement password expiration policies and enforce password changes.

Correção

Enumeração de Fraquezas

CWE-640

Identificadores relacionados

CVE-2019-14955

Produtos afetados

Jetbrains Hub

Referências · 3

• https://blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-14955 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-14955 · Nota de Segurança