CVE-2019-9873

In several versions of JetBrains IntelliJ IDEA Ultimate, creating Task Servers configurations leads to saving a cleartext unencrypted record of the server credentials in the IDE configuration files. The issue has been fixed in the following versions: 2019.1, 2018.3.5, 2018.2.8, and 2018.1.8...

CVE-2019-9186

In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute code when the configuration is running, because a JMX server listens on all interfaces instead of listening on only the localhost interface. This issue has bee...

CVE-2019-9823

In several JetBrains IntelliJ IDEA versions, creating remote run configurations of JavaEE application servers leads to saving a cleartext record of the server credentials in the IDE configuration files. The issue has been fixed in the following versions: 2018.3.5, 2018.2.8, 2018.1.8...

CVE-2019-18361

JetBrains IntelliJ IDEA before 2019.2 allows local user privilege escalation, potentially leading to arbitrary code execution...

CVE-2019-10104

In several JetBrains IntelliJ IDEA Ultimate versions, an Application Server run configuration for Tomcat, Jetty, Resin, or CloudBees with the default setting allowed a remote attacker to execute code when the configuration is running, because a JMX server listened on all interfaces instead of...

JetBrains IntelliJ IDEA Log Information Disclosure Vulnerability

JetBrains IntelliJ IDEA is a Czech JetBrains set of integrated development environment for the Java language . JetBrains IntelliJ IDEA suffers from a log information disclosure vulnerability that originates from code being logged in the idea.log file. An attacker could exploit this vulnerability ...

Malicious code in gear-idea-indexer-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e4383fa116dab4a076fef8694ef177acb72f5e46038222fdc48e6339dc84a6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3739 Malicious code in gear-idea-indexer-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e4383fa116dab4a076fef8694ef177acb72f5e46038222fdc48e6339dc84a6b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gear-idea-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a66acd20e2061aa436f304d41c80567e858c74d563f53fcd774df5bce17c47b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3738 Malicious code in gear-idea-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7a66acd20e2061aa436f304d41c80567e858c74d563f53fcd774df5bce17c47b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

IntelliJ IDEA < 2024.2.4 / 2024.3 (macOS)

The version of IntelliJ IDEA installed on the remote host is prior to 2024.2.4, 2024.3. It is, therefore, affected by a vulnerability as referenced in the advisory. - In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log file CVE-2025-32054 Note that Nessu...

The vulnerability of the IntelliJ IDEA integrated development environment, related to the disclosure of information in the log file, allows attackers to gain unauthorized access to protected information.

The vulnerability of the IntelliJ IDEA integrated development environment is related to the disclosure of information in the idea.log log file. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

CVE-2025-32054

In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log file...

CVE-2025-32054

In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log file...

CVE-2025-32054

In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log file...

CVE-2025-32054

In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log file...

CVE-2025-32054

CVE-2025-32054 affects JetBrains IntelliJ IDEA prior to 2024.3, including 2024.2.4. The issue is a logging vulnerability where source code could be written to the idea.log file, potentially exposing sensitive information. The root cause is that certain source code content is logged during normal ...

CVE-2025-32054

In JetBrains IntelliJ IDEA before 2024.3, 2024.2.4 source code could be logged in the idea.log file...

PT-2025-14777 · Jetbrains · Intellij Idea

Name of the Vulnerable Software and Affected Versions: JetBrains IntelliJ IDEA versions prior to 2024.3 JetBrains IntelliJ IDEA version 2024.2.4 Description: The issue concerns the logging of source code in the idea.log file. Recommendations: For versions prior to 2024.3, update to version 2024.3...

JetBrains IntelliJ IDEA 日志信息泄露漏洞

JetBrains IntelliJ IDEA is a Czech JetBrains set of integrated development environment for the Java language . JetBrains IntelliJ IDEA suffers from a log information disclosure vulnerability that originates from code being logged in the idea.log file. An attacker could exploit this vulnerability ...