PT-2023-15777 · Jetbrains · Jetbrains Intellij Idea

CVE-2022-48433 · Publicado 2023-03-29 · Atualizado 2023-04-01

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2023.1

Description The issue concerns the potential leak of NTLM hash through an API method in the built-in web server of JetBrains IntelliJ IDEA.

Recommendations For versions prior to 2023.1, update to version 2023.1 or later to resolve the issue.

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2022-48433

Produtos afetados

Jetbrains Intellij Idea

Referências · 4

• https://osv.dev/vulnerability/CVE-2022-48433 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-48433 · Nota de Segurança
• https://t.me/cibsecurity/61010 · Publicação no Telegram
• https://jetbrains.com/privacy-security/issues-fixed · Aviso do Fabricante