CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2020-7905
https://notcve.org/view.php?id=CVE-2020-7905
30 Jan 2020 — Ports listened to by JetBrains IntelliJ IDEA before 2019.3 were exposed to the network. Los puertos escuchados por JetBrains IntelliJ IDEA versiones anteriores a 2019.3, estuvieron expuestos en la red. • https://blog.jetbrains.com •
CVSS: 7.4EPSS: 0%CPEs: 1EXPL: 0CVE-2020-7904
https://notcve.org/view.php?id=CVE-2020-7904
30 Jan 2020 — In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS. En JetBrains IntelliJ IDEA versiones anteriores a 2019.3, algunos repositorios Maven eran accedidos por medio de HTTP en lugar de HTTPS. • https://blog.jetbrains.com • CWE-295: Improper Certificate Validation •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2019-18361
https://notcve.org/view.php?id=CVE-2019-18361
31 Oct 2019 — JetBrains IntelliJ IDEA before 2019.2 allows local user privilege escalation, potentially leading to arbitrary code execution. JetBrains IntelliJ IDEA versiones anteriores a 2019.2, permite la escalada de privilegios de un usuario local, conllevando potencialmente a una ejecución de código arbitrario. • https://blog.jetbrains.com/blog/2019/10/29/jetbrains-security-bulletin-q3-2019 •
CVSS: 5.9EPSS: 0%CPEs: 1EXPL: 0CVE-2019-14954
https://notcve.org/view.php?id=CVE-2019-14954
01 Oct 2019 — JetBrains IntelliJ IDEA before 2019.2 was resolving the markdown plantuml artifact download link via a cleartext http connection. JetBrains IntelliJ IDEA versiones anteriores a 2019.2, estaba resolviendo el enlace de descarga del artefacto plantuml en descuento por medio de una conexión http de texto sin cifrar. • https://blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019 • CWE-319: Cleartext Transmission of Sensitive Information •
CVSS: 9.8EPSS: 1%CPEs: 4EXPL: 0CVE-2019-10104
https://notcve.org/view.php?id=CVE-2019-10104
03 Jul 2019 — In several JetBrains IntelliJ IDEA Ultimate versions, an Application Server run configuration (for Tomcat, Jetty, Resin, or CloudBees) with the default setting allowed a remote attacker to execute code when the configuration is running, because a JMX server listened on all interfaces instead of localhost only. The issue has been fixed in the following versions: 2018.3.4, 2018.2.8, 2018.1.8, and 2017.3.7. En varias versiones de IntelliJ IDEA Ultimate de JetBrains, una configuración de ejecución del Servidor ... • https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019 •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2019-9873
https://notcve.org/view.php?id=CVE-2019-9873
03 Jul 2019 — In several versions of JetBrains IntelliJ IDEA Ultimate, creating Task Servers configurations leads to saving a cleartext unencrypted record of the server credentials in the IDE configuration files. The issue has been fixed in the following versions: 2019.1, 2018.3.5, 2018.2.8, and 2018.1.8. En varias versiones de IntelliJ IDEA Ultimate de JetBrains, la creación de configuraciones de Servidores de Tareas permite guardar un registro de texto no cifrado de las credenciales del servidor en los archivos de conf... • https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019 • CWE-312: Cleartext Storage of Sensitive Information CWE-522: Insufficiently Protected Credentials •
CVSS: 8.1EPSS: 0%CPEs: 4EXPL: 0CVE-2019-9872
https://notcve.org/view.php?id=CVE-2019-9872
03 Jul 2019 — In several versions of JetBrains IntelliJ IDEA Ultimate, creating run configurations for cloud application servers leads to saving a cleartext unencrypted record of the server credentials in the IDE configuration files. If the Settings Repository plugin was then used and configured to synchronize IDE settings using a public repository, these credentials were published to this repository. The issue has been fixed in the following versions: 2019.1, 2018.3.5, 2018.2.8, and 2018.1.8. En varias versiones de Inte... • https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019 • CWE-312: Cleartext Storage of Sensitive Information CWE-522: Insufficiently Protected Credentials •
CVSS: 9.8EPSS: 1%CPEs: 4EXPL: 0CVE-2019-9186
https://notcve.org/view.php?id=CVE-2019-9186
03 Jul 2019 — In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed remote attackers to execute code when the configuration is running, because a JMX server listens on all interfaces (instead of listening on only the localhost interface). This issue has been fixed in the following versions: 2019.1, 2018.3.4, 2018.2.8, 2018.1.8, and 2017.3.7. En varias versiones de JetBrains IntelliJ IDEA, una configuración de ejecución Spring Boot con la configuración predeterminada... • https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019 • CWE-668: Exposure of Resource to Wrong Sphere •
CVSS: 9.8EPSS: 0%CPEs: 3EXPL: 0CVE-2019-9823
https://notcve.org/view.php?id=CVE-2019-9823
03 Jul 2019 — In several JetBrains IntelliJ IDEA versions, creating remote run configurations of JavaEE application servers leads to saving a cleartext record of the server credentials in the IDE configuration files. The issue has been fixed in the following versions: 2018.3.5, 2018.2.8, 2018.1.8. En varias versiones de JetBrains IntelliJ IDEA, la creación de configuraciones de ejecución remota de servidores de aplicaciones JavaEE permite guardar un registro de texto claro de las credenciales del servidor en los archivos... • https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019 • CWE-312: Cleartext Storage of Sensitive Information CWE-522: Insufficiently Protected Credentials •