Lucene search

JetBrainsCVE-2024-47159

HistorySep 19, 2024 - 6:15 p.m.

CVE-2024-47159

2024-09-1918:15:09

CWE-863

JetBrains

web.nvd.nist.gov

jetbrains

youtrack

2024.3.44799

workflow

permission

vulnerability

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

7.1

Confidence

Low

EPSS

Percentile

14.7%

JSON

In JetBrains YouTrack before 2024.3.44799 user without appropriate permissions could restore workflows attached to a project

Affected configurations

Nvd

Node

jetbrainsyoutrackRange<2024.3.44799

VendorProductVersionCPE
jetbrainsyoutrack*cpe:2.3:a:jetbrains:youtrack:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
jetbrains	youtrack	*	cpe:2.3:a:jetbrains:youtrack::::::::

CNA Affected

[
  {
    "vendor": "JetBrains",
    "product": "YouTrack",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThan": "2024.3.44799",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.jetbrains.com/privacy-security/issues-fixed/

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

AI Score

7.1

Confidence

Low

EPSS

Percentile

14.7%

JSON

Related for CVE-2024-47159