CVE-2019-10104

In several JetBrains IntelliJ IDEA Ultimate versions, an Application Server run configuration for Tomcat, Jetty, Resin, or CloudBees with the default setting allowed a remote attacker to execute code when the configuration is running, because a JMX server listened on all interfaces instead of...

CVE-2019-10104

JetBrains IntelliJ IDEA Ultimate is affected by CVE-2019-10104. Affected component: Application Server run configurations (for Tomcat, Jetty, Resin, or CloudBees) that by default allowed a JMX server to listen on all interfaces, enabling remote code execution when the configuration is active. Roo...

CVE-2019-9873

In several versions of JetBrains IntelliJ IDEA Ultimate, creating Task Servers configurations leads to saving a cleartext unencrypted record of the server credentials in the IDE configuration files. The issue has been fixed in the following versions: 2019.1, 2018.3.5, 2018.2.8, and 2018.1.8...

CVE-2019-9873

CVE-2019-9873 affects JetBrains IntelliJ IDEA Ultimate. When configuring Task Servers, the IDE could store server credentials in plaintext in its configuration files, exposing sensitive data. The root cause is cleartext storage of secrets in the IDE’s configuration. The issue has been fixed in th...

CVE-2019-9872

In several versions of JetBrains IntelliJ IDEA Ultimate, creating run configurations for cloud application servers leads to saving a cleartext unencrypted record of the server credentials in the IDE configuration files. If the Settings Repository plugin was then used and configured to synchronize...

CVE-2019-9872

CVE-2019-9872 affects JetBrains IntelliJ IDEA Ultimate. When creating run configurations for cloud application servers, credentials could be saved in plaintext in IDE configuration files. If the Settings Repository plugin was used to synchronize settings to a public repository, these credentials ...

CVE-2019-9186

In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute code when the configuration is running, because a JMX server listens on all interfaces instead of listening on only the localhost interface. This issue has bee...

CVE-2019-9186

In JetBrains IntelliJ IDEA, the Spring Boot run configuration could allow remote code execution because a JMX server listened on all network interfaces instead of only localhost. Affected versions were fixed in 2019.1, 2018.3.4, 2018.2.8, 2018.1.8, and 2017.3.7. The CVE is CVE-2019-9186. Public d...

CVE-2019-9823

In several JetBrains IntelliJ IDEA versions, creating remote run configurations of JavaEE application servers leads to saving a cleartext record of the server credentials in the IDE configuration files. The issue has been fixed in the following versions: 2018.3.5, 2018.2.8, 2018.1.8...

CVE-2019-9823

CVE-2019-9823 affects several JetBrains IntelliJ IDEA versions where creating remote run configurations for JavaEE application servers causes a cleartext record of server credentials to be saved in IDE configuration files. The root cause is cleartext storage of credentials within IDEA configurati...

PT-2019-11552 · Jetbrains · Kotlin +1

Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to Kotlin plugin version 1.3.30 Description: The issue allows for a potential MITM attack due to JetBrains IntelliJ IDEA projects created using the Kotlin JS Client/JVM Server IDE Template resolving Grad...

CVE-2019-10103

JetBrains IntelliJ IDEA projects created using the Kotlin JS Client/JVM Server IDE Template were resolving Gradle artifacts using an http connection, potentially allowing an MITM attack. This issue, which was fixed in Kotlin plugin version 1.3.30, is similar to CVE-2019-10101...

CVE-2019-10103

Removed by vendor...

PT-2019-19906

Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA Ultimate versions prior to 2019.1 JetBrains IntelliJ IDEA Ultimate version 2018.3 before 2018.3.5 JetBrains IntelliJ IDEA Ultimate version 2018.2 before 2018.2.8 JetBrains IntelliJ IDEA Ultimate version 2018.1 before...

PT-2019-19423

Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2019.1 JetBrains IntelliJ IDEA versions prior to 2018.3.4 JetBrains IntelliJ IDEA versions prior to 2018.2.8 JetBrains IntelliJ IDEA versions prior to 2018.1.8 JetBrains IntelliJ IDEA versions prior to...

PT-2019-19876

Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2018.3.5 JetBrains IntelliJ IDEA versions prior to 2018.2.8 JetBrains IntelliJ IDEA versions prior to 2018.1.8 Description The issue arises when creating remote run configurations of JavaEE application...

PT-2019-19907

Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA Ultimate versions prior to 2018.1.8 JetBrains IntelliJ IDEA Ultimate versions prior to 2018.2.8 JetBrains IntelliJ IDEA Ultimate versions prior to 2018.3.5 JetBrains IntelliJ IDEA Ultimate versions prior to 2019.1...

CVE-2019-10104: Undefined Security Weakness

In several JetBrains IntelliJ IDEA Ultimate versions, an Application Server run configuration for Tomcat, Jetty, Resin, or CloudBees with the default setting allowed a remote attacker to execute code when the configuration is running, because a JMX server listened on all interfaces instead of...

CVE-2019-9873: Cleartext Storage of Sensitive Information

In several versions of JetBrains IntelliJ IDEA Ultimate, creating Task Servers configurations leads to saving a cleartext unencrypted record of the server credentials in the IDE configuration files. The issue has been fixed in the following versions: 2019.1, 2018.3.5, 2018.2.8, and 2018.1.8...

CVE-2019-9872: Cleartext Storage of Sensitive Information

In several versions of JetBrains IntelliJ IDEA Ultimate, creating run configurations for cloud application servers leads to saving a cleartext unencrypted record of the server credentials in the IDE configuration files. If the Settings Repository plugin was then used and configured to synchronize...