Lucene search

[email protected]CVE-2024-24939

HistoryFeb 06, 2024 - 10:15 a.m.

CVE-2024-24939

2024-02-0610:15:10

CWE-532

[email protected]

web.nvd.nist.gov

cve-2024-24939

jetbrains rider

logging vulnerability

environment variables

secret values

nvd

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

7.4 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.0005 Low

EPSS

Percentile

16.0%

JSON

In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible

CPENameOperatorVersion
jetbrains:riderjetbrains riderlt2023.3.3
jetbrains:riderjetbrains ridereq2018.3.3
jetbrains:riderjetbrains ridereq-
jetbrains:riderjetbrains ridereq2018.2.3
jetbrains:riderjetbrains ridereq2019.2
jetbrains:riderjetbrains ridereq2017.2
jetbrains:riderjetbrains ridereq2019.1.1
jetbrains:riderjetbrains ridereq2019.1.3
jetbrains:riderjetbrains ridereq2018.3.2
jetbrains:riderjetbrains ridereq2017.2.1

CPE	Name	Operator	Version
jetbrains:rider	jetbrains rider	lt	2023.3.3
jetbrains:rider	jetbrains rider	eq	2018.3.3
jetbrains:rider	jetbrains rider	eq	-
jetbrains:rider	jetbrains rider	eq	2018.2.3
jetbrains:rider	jetbrains rider	eq	2019.2
jetbrains:rider	jetbrains rider	eq	2017.2
jetbrains:rider	jetbrains rider	eq	2019.1.1
jetbrains:rider	jetbrains rider	eq	2019.1.3
jetbrains:rider	jetbrains rider	eq	2018.3.2
jetbrains:rider	jetbrains rider	eq	2017.2.1

Rows per page:

1-10 of 331

References

www.jetbrains.com/privacy-security/issues-fixed/

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

7.4 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.0005 Low

EPSS

Percentile

16.0%

JSON

Related for CVE-2024-24939

prion1