PT-2025-46154 · Jetbrains · Jetbrains Youtrack
CVE-2025-64685
·
Published
2025-11-10
·
Updated
2025-11-21
CVSS v2.0
8.5
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:N |
Name of the Vulnerable Software and Affected Versions
JetBrains YouTrack versions prior to 2025.3.104432
Description
The issue concerns missing TLS certificate validation in JetBrains YouTrack. This lack of validation disables proper verification of server certificates when establishing TLS connections, potentially leading to data disclosure.
Recommendations
Update JetBrains YouTrack to version 2025.3.104432 or later.
Fix
Improper Certificate Validation
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Jetbrains Youtrack