Lucene search

K
nvd[email protected]NVD:CVE-2022-37009
HistoryJul 28, 2022 - 11:15 a.m.

CVE-2022-37009

2022-07-2811:15:07
CWE-94
web.nvd.nist.gov
2
jetbrains intellij idea
vulnerability
local code execution
vagrant executable

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

5.1%

In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible

Affected configurations

Nvd
Node
jetbrainsintellij_ideaRange<2022.2
VendorProductVersionCPE
jetbrainsintellij_idea*cpe:2.3:a:jetbrains:intellij_idea:*:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

5.1%

Related for NVD:CVE-2022-37009