Описание
In JetBrains Hub versions earlier than 2018.4.11298, the audit events for SMTPSettings show a cleartext password to the admin user. It is only relevant in cases where a password has not changed since 2017, and if the audit log still contains events from before that period.
Уязвимые конфигурации
Конфигурация 1Версия до 2018.4.11298 (исключая)
cpe:2.3:a:jetbrains:hub:*:*:*:*:*:*:*:*
EPSS
Процентиль: 0%
0.00003
Низкий
7.2 High
CVSS3
4 Medium
CVSS2
Дефекты
CWE-522
Связанные уязвимости
CVSS3: 7.2
github
больше 3 лет назад
In JetBrains Hub versions earlier than 2018.4.11298, the audit events for SMTPSettings show a cleartext password to the admin user. It is only relevant in cases where a password has not changed since 2017, and if the audit log still contains events from before that period.
EPSS
Процентиль: 0%
0.00003
Низкий
7.2 High
CVSS3
4 Medium
CVSS2
Дефекты
CWE-522