PT-2019-13892 · Jetbrains · Jetbrains Hub

Published 2019-10-01 · Updated 2019-10-08 · CVE-2019-14955

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions JetBrains Hub versions prior to 2018.4.11436

Description The issue concerns the lack of a password expiration policy and the inability to force users to change their passwords.

Recommendations For versions prior to 2018.4.11436, update to version 2018.4.11436 or later to implement password expiration policies and enforce password changes.

Fix

Weakness Enumeration

CWE-640

Related Identifiers

CVE-2019-14955

Affected Products

Jetbrains Hub

References · 3

• https://blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-14955 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-14955 · Security Note