PT-2026-25323 · Jetbrains · Jetbrains Datalore

Publicado 2026-03-13 · Atualizado 2026-03-14 · CVE-2026-32745

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:A/AC:L/Au:N/C:C/I:P/A:N

Name of the Vulnerable Software and Affected Versions JetBrains Datalore versions prior to 2026.1

Description A session hijacking issue existed in JetBrains Datalore due to the absence of the secure attribute for cookie settings. This allowed for potential unauthorized access to user sessions.

Recommendations Update JetBrains Datalore to version 2026.1 or later.

Correção

Cleartext Transmission of Sensitive Information

Enumeração de Fraquezas

CWE-614

CWE-319

Identificadores relacionados

BDU:2026-04464

CVE-2026-32745

Produtos afetados

Jetbrains Datalore

Referências · 6

• https://jetbrains.com/privacy-security/issues-fixed · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2032831377771737422 · Publicação no Twitter
• https://t.me/CVEtracker/47371 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2026-04464 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2026-32745 · Nota de Segurança
• https://twitter.com/cyberbivash/status/2032541094471233888 · Publicação no Twitter