PT-2020-19841 · Jetbrains · Youtrack

Published 2020-01-30 · Updated 2020-02-01 · CVE-2020-7912

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2019.2.59309

Description The issue allows SMTP/Jabber settings to be accessed using backups.

Recommendations For versions prior to 2019.2.59309, update to version 2019.2.59309 or later to resolve the issue.

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2020-7912

Affected Products

Youtrack

References · 5

• https://osv.dev/vulnerability/CVE-2020-7912 · Vendor Advisory
• https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019 · Vendor Advisory
• https://blog.jetbrains.com · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7912 · Security Note
• https://t.me/cvenotify/663 · Telegram Post