PT-2019-19907 · Jetbrains · Intellij Idea Ultimate

Published 2019-07-03 · Updated 2020-08-24 · CVE-2019-9873

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA Ultimate versions prior to 2018.1.8 JetBrains IntelliJ IDEA Ultimate versions prior to 2018.2.8 JetBrains IntelliJ IDEA Ultimate versions prior to 2018.3.5 JetBrains IntelliJ IDEA Ultimate versions prior to 2019.1

Description The issue concerns saving server credentials in cleartext in the IDE configuration files when creating Task Servers configurations.

Recommendations For versions prior to 2018.1.8, update to version 2018.1.8 or later. For versions prior to 2018.2.8, update to version 2018.2.8 or later. For versions prior to 2018.3.5, update to version 2018.3.5 or later. For versions prior to 2019.1, update to version 2019.1 or later.

Fix

Insufficiently Protected Credentials

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-522

CWE-312

Related Identifiers

CVE-2019-9873

Affected Products

Intellij Idea Ultimate

References · 8

• https://osv.dev/vulnerability/UBUNTU-CVE-2019-9873 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-9873 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-9873 · Security Note
• https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019 · Vendor Advisory
• https://ubuntu.com/security/CVE-2019-9873 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2019-9873 · Security Note
• https://t.me/cvenotify/252 · Telegram Post
• https://t.me/cvenotify/196 · Telegram Post