Lucene search

K
nvd[email protected]NVD:CVE-2021-45977
HistoryFeb 25, 2022 - 3:15 p.m.

CVE-2021-45977

2022-02-2515:15:09
web.nvd.nist.gov
4
jetbrains ides
ip address
cve-2021-45977
remote development

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

60.5%

JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, RubyMine 2021.3.1 RC, CLion 2021.3.1, WebStorm 2021.3.1 Preview, and WebStorm 2021.3.1 RC (used as Remote Development backend IDEs) bind to the 0.0.0.0 IP address. The fixed versions are: IntelliJ IDEA 2021.3.1, PyCharm Professional 2021.3.1, GoLand 2021.3.2, PhpStorm 2021.3.1 (213.6461.83), RubyMine 2021.3.1, CLion 2021.3.2, and WebStorm 2021.3.1.

Affected configurations

Nvd
Node
jetbrainsclionMatch2021.3.1
OR
jetbrainsgolandMatch2021.3.1
OR
jetbrainsintellij_ideaMatch2021.3.1preview
OR
jetbrainsintellij_ideaMatch2021.3.1rc
OR
jetbrainsphpstormMatch2021.3.1preview
OR
jetbrainsphpstormMatch2021.3.1rc
OR
jetbrainspycharmMatch2021.3.12021.3.1professional
OR
jetbrainsrubymineMatch2021.3.1preview
OR
jetbrainsrubymineMatch2021.3.1rc
OR
jetbrainswebstormMatch2021.3.1preview
OR
jetbrainswebstormMatch2021.3.1rc
VendorProductVersionCPE
jetbrainsclion2021.3.1cpe:2.3:a:jetbrains:clion:2021.3.1:*:*:*:*:*:*:*
jetbrainsgoland2021.3.1cpe:2.3:a:jetbrains:goland:2021.3.1:*:*:*:*:*:*:*
jetbrainsintellij_idea2021.3.1cpe:2.3:a:jetbrains:intellij_idea:2021.3.1:preview:*:*:*:*:*:*
jetbrainsintellij_idea2021.3.1cpe:2.3:a:jetbrains:intellij_idea:2021.3.1:rc:*:*:*:*:*:*
jetbrainsphpstorm2021.3.1cpe:2.3:a:jetbrains:phpstorm:2021.3.1:preview:*:*:*:*:*:*
jetbrainsphpstorm2021.3.1cpe:2.3:a:jetbrains:phpstorm:2021.3.1:rc:*:*:*:*:*:*
jetbrainspycharm2021.3.1cpe:2.3:a:jetbrains:pycharm:2021.3.1:2021.3.1:*:*:professional:*:*:*
jetbrainsrubymine2021.3.1cpe:2.3:a:jetbrains:rubymine:2021.3.1:preview:*:*:*:*:*:*
jetbrainsrubymine2021.3.1cpe:2.3:a:jetbrains:rubymine:2021.3.1:rc:*:*:*:*:*:*
jetbrainswebstorm2021.3.1cpe:2.3:a:jetbrains:webstorm:2021.3.1:preview:*:*:*:*:*:*
Rows per page:
1-10 of 111

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

60.5%

Related for NVD:CVE-2021-45977