PT-2020-12773 · Jetbrains · Goland

Published 2020-04-22 · Updated 2021-07-21 · CVE-2020-11685

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions JetBrains GoLand versions prior to 2019.3.2

Description The plugin repository in JetBrains GoLand was accessed via HTTP instead of HTTPS, which could pose a security risk.

Recommendations For versions prior to 2019.3.2, update to version 2019.3.2 or later to ensure the plugin repository is accessed via HTTPS.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2020-11685

Affected Products

Goland

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-11685 · Security Note
• https://osv.dev/vulnerability/CVE-2020-11685 · Vendor Advisory
• https://blog.jetbrains.com/blog/2020/04/22/jetbrains-security-bulletin-q1-2020 · Vendor Advisory