PT-2021-21176 · Jetbrains · Jetbrains Hub

Petrusviet · Published 2021-08-06 · Updated 2021-08-12 · CVE-2021-36209

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions JetBrains Hub versions prior to 2021.1.13389

Description The issue allows for account takeover during the password reset process.

Recommendations For versions prior to 2021.1.13389, update to version 2021.1.13389 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-640

Related Identifiers

CVE-2021-36209

Affected Products

Jetbrains Hub

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2021-36209 · Security Note
• https://osv.dev/vulnerability/CVE-2021-36209 · Vendor Advisory
• https://blog.jetbrains.com/blog/2021/08/05/jetbrains-security-bulletin-q2-2021 · Vendor Advisory
• https://t.me/cvenotify/19230 · Telegram Post
• https://t.me/cvenotify/18784 · Telegram Post
• https://t.me/cibsecurity/26952 · Telegram Post