Lucene search

[email protected]CVE-2022-28651

HistoryApr 05, 2022 - 6:15 p.m.

CVE-2022-28651

2022-04-0518:15:08

CWE-497

CWE-522

[email protected]

web.nvd.nist.gov

627

jetbrains

intellij idea

cve

2022

28651

password extraction

security vulnerability

nvd

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

In JetBrains IntelliJ IDEA before 2021.3.3 it was possible to get passwords from protected fields

Affected configurations

NVD

Node

jetbrainsintellij_ideaRange<2021.3.3

CPENameOperatorVersion
jetbrains:intellij_ideajetbrains intellij idealt2021.3.3

CPE	Name	Operator	Version
jetbrains:intellij_idea	jetbrains intellij idea	lt	2021.3.3

CNA Affected

[
  {
    "product": "IntelliJ IDEA",
    "vendor": "JetBrains",
    "versions": [
      {
        "lessThan": "2021.3.3",
        "status": "affected",
        "version": "2021.3.3",
        "versionType": "custom"
      }
    ]
  }
]

References

www.jetbrains.com/privacy-security/issues-fixed/

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2022-28651

cvelist1 prion1 nvd1