CVE-2022-24332
https://notcve.org/view.php?id=CVE-2022-24332
In JetBrains TeamCity before 2021.2, a logout action didn't remove a Remember Me cookie. En JetBrains TeamCity versiones anteriores a 2021.2, una acción de cierre de sesión no eliminaba una cookie Remember Me. • https://blog.jetbrains.com https://blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021 • CWE-613: Insufficient Session Expiration •
CVE-2022-24331
https://notcve.org/view.php?id=CVE-2022-24331
In JetBrains TeamCity before 2021.1.4, GitLab authentication impersonation was possible. En JetBrains TeamCity versiones anteriores a 2021.1.4, era posible una suplantación de la autenticación de GitLab. • https://blog.jetbrains.com https://blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021 •
CVE-2022-24330
https://notcve.org/view.php?id=CVE-2022-24330
In JetBrains TeamCity before 2021.2.1, a redirection to an external site was possible. En JetBrains TeamCity versiones anteriores a 2021.2.1, era posible un redireccionamiento a un sitio externo. • https://blog.jetbrains.com https://blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021 • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •
CVE-2022-24329
https://notcve.org/view.php?id=CVE-2022-24329
In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects. En JetBrains Kotlin versiones anteriores a 1.6.0, no era posible bloquear dependencias para proyectos Gradle multiplataforma. • https://blog.jetbrains.com https://blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021 https://www.oracle.com/security-alerts/cpuapr2022.html https://www.oracle.com/security-alerts/cpujul2022.html • CWE-667: Improper Locking •
CVE-2022-24328
https://notcve.org/view.php?id=CVE-2022-24328
In JetBrains Hub before 2021.1.13956, an unprivileged user could perform DoS. En JetBrains Hub versiones anteriores a 2021.1.13956, un usuario no privilegiado podía llevar a cabo un DoS. • https://blog.jetbrains.com https://blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021 •