PT-2019-19907 · Jetbrains · Intellij Idea Ultimate

Publicado 2019-07-03 · Atualizado 2020-08-24 · CVE-2019-9873

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA Ultimate versions prior to 2018.1.8 JetBrains IntelliJ IDEA Ultimate versions prior to 2018.2.8 JetBrains IntelliJ IDEA Ultimate versions prior to 2018.3.5 JetBrains IntelliJ IDEA Ultimate versions prior to 2019.1

Description The issue concerns saving server credentials in cleartext in the IDE configuration files when creating Task Servers configurations.

Recommendations For versions prior to 2018.1.8, update to version 2018.1.8 or later. For versions prior to 2018.2.8, update to version 2018.2.8 or later. For versions prior to 2018.3.5, update to version 2018.3.5 or later. For versions prior to 2019.1, update to version 2019.1 or later.

Correção

Insufficiently Protected Credentials

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-522

CWE-312

Identificadores relacionados

CVE-2019-9873

Produtos afetados

Intellij Idea Ultimate

Referências · 8

• https://osv.dev/vulnerability/UBUNTU-CVE-2019-9873 · Aviso do Fabricante
• https://t.me/cvenotify/252 · Publicação no Telegram
• https://t.me/cvenotify/196 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2019-9873 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-9873 · Nota de Segurança
• https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2019-9873 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2019-9873 · Nota de Segurança