1137 matches found
CVE-2021-37551
In JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256...
CVE-2021-37553
In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used...
CVE-2021-37553
In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used...
CVE-2021-37554
In JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding permissions...
CVE-2021-37549
In JetBrains YouTrack before 2021.1.11111, sandboxing in workflows was insufficient...
Design/Logic Flaw
In JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding permissions...
Cross site scripting
In JetBrains YouTrack before 2021.2.17925, stored XSS was possible...
Design/Logic Flaw
In JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used...
CVE-2021-37551
In JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256...
CVE-2021-37553
In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used...
Design/Logic Flaw
In JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256...
Design/Logic Flaw
In JetBrains YouTrack before 2021.1.11111, sandboxing in workflows was insufficient...
Design/Logic Flaw
In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used...
CVE-2021-37550
In JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used...
CVE-2021-37554
CVE-2021-37554 affects JetBrains YouTrack. The vulnerability arises from an improper access control that allowed a user to see boards without the required permissions. The issue is tied to YouTrack versions prior to 2021.3.21051, with the fixed release noted as 2021.3.21051 in JetBrains’ security...
CVE-2021-37554
In JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding permissions...
CVE-2021-37553
The CVE-2021-37553 affects JetBrains YouTrack (before version 2021.2.16363). The underlying issue is the use of an insecure PRNG in YouTrack’s security features, as documented across multiple sources (Red Hat, NVD, CNVD) and JetBrains’ Q2-2021 Security Bulletin, which notes the flaw and that it w...
CVE-2021-37553
In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used...
CVE-2021-37551
CVE-2021-37551 affects JetBrains YouTrack prior to 2021.2.16363, where system user passwords were hashed with SHA-256. Public sources (CNVD/Red Hat/NVD) describe an encryption/hash issue that could allow password recovery from the hash. JetBrains’ Q2 2021 Security Bulletin confirms the issue and ...