Lucene search

PRIOn knowledge basePRION:CVE-2024-24939

HistoryFeb 06, 2024 - 10:15 a.m.

Design/Logic Flaw

2024-02-0610:15:00

PRIOn knowledge base

www.prio-n.com

jetbrains

rider

environment variables

logging

flaw

security

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

7.2 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.0005 Low

EPSS

Percentile

14.1%

JSON

In JetBrains Rider before 2023.3.3 logging of environment variables containing secret values was possible

CPENameOperatorVersion
riderlt2023.3.3

CPE	Name	Operator	Version
	rider	lt	2023.3.3

References

www.jetbrains.com/privacy-security/issues-fixed/

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

7.2 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.0005 Low

EPSS

Percentile

14.1%

JSON

Related for PRION:CVE-2024-24939