PT-2019-19876
CVE-2019-9823
·
Published
2019-07-03
·
Updated
2020-08-24
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
JetBrains IntelliJ IDEA versions prior to 2018.3.5
JetBrains IntelliJ IDEA versions prior to 2018.2.8
JetBrains IntelliJ IDEA versions prior to 2018.1.8
Description
The issue arises when creating remote run configurations of JavaEE application servers in JetBrains IntelliJ IDEA, resulting in the storage of server credentials in cleartext within the IDE configuration files.
Recommendations
For versions prior to 2018.3.5, update to version 2018.3.5 or later.
For versions prior to 2018.2.8, update to version 2018.2.8 or later.
For versions prior to 2018.1.8, update to version 2018.1.8 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾