FYI Security

JetBrains Security Bulletin Q1 2019

Robert Demmer

This bulletin summarizes the security vulnerabilities detected in JetBrains products and remediated in the first quarter of 2019.

These include issues reported by Jonathan Leitschuh potentially exposing a product user or a project’s infrastructure to man-in-the-middle attacks, namely

• resolving Gradle, Maven, and sbt project artifacts over an unencrypted connection in various projects; and
• generating project templates in an IDE causing the above-mentioned issue in a user’s project.

We’ve also run extended verification of the secret storage mechanism in our IDEs’ settings, and identified and fixed several cases of cleartext secret storage.

Here’s a summary report that comprises the affected product, the description of each issue, its severity, and the product version containing the fix.

If you need any further assistance, please contact our Security Team.

Subscribe to receive the bulletin in your mailbox.

Your JetBrains Team
The Drive to Develop

security bulletin

• Share
• Facebook
• Twitter__
• Linkedin

SpringShell Vulnerability in JetBrains Products and Services Next post

Subscribe to JetBrains Blog updates

Subscribe form

By submitting this form, I agree to the JetBrains Privacy Policy Notification icon

By submitting this form, I agree that JetBrains s.r.o. (“JetBrains”) may use my name, email address, and location data to send me newsletters, including commercial communications, and to process my personal data for this purpose. I agree that JetBrains may process said data using third-party services for this purpose in accordance with the JetBrains Privacy Policy. I understand that I can revoke this consent at any time in my profile. In addition, an unsubscribe link is included in each email.

Submit

Thanks, we’ve got you!