Lucene search

[email protected]CVE-2021-45977

HistoryFeb 25, 2022 - 3:15 p.m.

CVE-2021-45977

2022-02-2515:15:09

[email protected]

web.nvd.nist.gov

723

cve-2021-45977

jetbrains

intellij idea

pycharm

goland

phpstorm

rubymine

clion

webstorm

ip address vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.5%

JSON

JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, RubyMine 2021.3.1 RC, CLion 2021.3.1, WebStorm 2021.3.1 Preview, and WebStorm 2021.3.1 RC (used as Remote Development backend IDEs) bind to the 0.0.0.0 IP address. The fixed versions are: IntelliJ IDEA 2021.3.1, PyCharm Professional 2021.3.1, GoLand 2021.3.2, PhpStorm 2021.3.1 (213.6461.83), RubyMine 2021.3.1, CLion 2021.3.2, and WebStorm 2021.3.1.

Affected configurations

NVD

Node

jetbrainsclionMatch2021.3.1

jetbrainsgolandMatch2021.3.1

jetbrainsintellij_ideaMatch2021.3.1preview

jetbrainsintellij_ideaMatch2021.3.1rc

jetbrainsphpstormMatch2021.3.1preview

jetbrainsphpstormMatch2021.3.1rc

jetbrainspycharmMatch2021.3.12021.3.1professional

jetbrainsrubymineMatch2021.3.1preview

jetbrainsrubymineMatch2021.3.1rc

jetbrainswebstormMatch2021.3.1preview

jetbrainswebstormMatch2021.3.1rc

CPENameOperatorVersion
jetbrains:clionjetbrains clioneq2021.3.1
jetbrains:golandjetbrains golandeq2021.3.1
jetbrains:intellij_ideajetbrains intellij ideaeq2021.3.1
jetbrains:phpstormjetbrains phpstormeq2021.3.1
jetbrains:pycharmjetbrains pycharmeq2021.3.1
jetbrains:rubyminejetbrains rubymineeq2021.3.1
jetbrains:webstormjetbrains webstormeq2021.3.1

CPE	Name	Operator	Version
jetbrains:clion	jetbrains clion	eq	2021.3.1
jetbrains:goland	jetbrains goland	eq	2021.3.1
jetbrains:intellij_idea	jetbrains intellij idea	eq	2021.3.1
jetbrains:phpstorm	jetbrains phpstorm	eq	2021.3.1
jetbrains:pycharm	jetbrains pycharm	eq	2021.3.1
jetbrains:rubymine	jetbrains rubymine	eq	2021.3.1
jetbrains:webstorm	jetbrains webstorm	eq	2021.3.1

References

blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021/

jetbrains.com

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.5%

JSON

Related for CVE-2021-45977

nvd1 prion1 cvelist1 jetbrains1