Lucene search

K
cvelistJetBrainsCVELIST:CVE-2022-29820
HistoryApr 28, 2022 - 9:55 a.m.

CVE-2022-29820

2022-04-2809:55:30
CWE-1327
JetBrains
www.cve.org
3
jetbrains pycharm
debugger port
network vulnerability

CVSS3

3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

AI Score

4.4

Confidence

High

EPSS

0

Percentile

12.6%

In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possible

CNA Affected

[
  {
    "product": "PyCharm",
    "vendor": "JetBrains",
    "versions": [
      {
        "lessThan": "2022.1",
        "status": "affected",
        "version": "2022.1",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

AI Score

4.4

Confidence

High

EPSS

0

Percentile

12.6%

Related for CVELIST:CVE-2022-29820