PT-2019-19876

CVE-2019-9823

·

Published

2019-07-03

·

Updated

2020-08-24

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2018.3.5 JetBrains IntelliJ IDEA versions prior to 2018.2.8 JetBrains IntelliJ IDEA versions prior to 2018.1.8
Description The issue arises when creating remote run configurations of JavaEE application servers in JetBrains IntelliJ IDEA, resulting in the storage of server credentials in cleartext within the IDE configuration files.
Recommendations For versions prior to 2018.3.5, update to version 2018.3.5 or later. For versions prior to 2018.2.8, update to version 2018.2.8 or later. For versions prior to 2018.1.8, update to version 2018.1.8 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾