PT-2024-7638 · Jetbrains · Jetbrains Hub

Published 2024-10-28 · Updated 2024-10-29 · CVE-2024-50573

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions JetBrains Hub versions prior to 2024.3.47707

Description The issue is related to insufficient authorization procedure in the account management software, allowing an attacker to gain unauthorized access to protected information. Improper access control in JetBrains Hub enables users to generate permanent tokens for unauthorized services.

Recommendations For versions prior to 2024.3.47707, update to version 2024.3.47707 or later to resolve the issue. As a temporary workaround, consider restricting access to token generation for unauthorized services until a patch is applied.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

BDU:2024-09079

CVE-2024-50573

Affected Products

Jetbrains Hub

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-50573 · Security Note
• https://jetbrains.com/privacy-security/issues-fixed · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-09079 · Security Note
• https://osv.dev/vulnerability/CVE-2024-50573 · Vendor Advisory
• https://t.me/cvedetector/9112 · Telegram Post
• https://t.me/cvenotify/99907 · Telegram Post