CVE-2021-45977

Опубликовано: 25 фев. 2022

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, RubyMine 2021.3.1 RC, CLion 2021.3.1, WebStorm 2021.3.1 Preview, and WebStorm 2021.3.1 RC (used as Remote Development backend IDEs) bind to the 0.0.0.0 IP address. The fixed versions are: IntelliJ IDEA 2021.3.1, PyCharm Professional 2021.3.1, GoLand 2021.3.2, PhpStorm 2021.3.1 (213.6461.83), RubyMine 2021.3.1, CLion 2021.3.2, and WebStorm 2021.3.1.

Ссылки

https://blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021/
Vendor Advisory
https://jetbrains.com
Vendor Advisory
https://blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021/
Vendor Advisory
https://jetbrains.com
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:jetbrains:clion:2021.3.1:*:*:*:*:*:*:*

cpe:2.3:a:jetbrains:goland:2021.3.1:*:*:*:*:*:*:*

cpe:2.3:a:jetbrains:intellij_idea:2021.3.1:preview:*:*:*:*:*:*

cpe:2.3:a:jetbrains:intellij_idea:2021.3.1:rc:*:*:*:*:*:*

cpe:2.3:a:jetbrains:phpstorm:2021.3.1:preview:*:*:*:*:*:*

cpe:2.3:a:jetbrains:phpstorm:2021.3.1:rc:*:*:*:*:*:*

cpe:2.3:a:jetbrains:pycharm:2021.3.1:2021.3.1:*:*:professional:*:*:*

cpe:2.3:a:jetbrains:rubymine:2021.3.1:preview:*:*:*:*:*:*

cpe:2.3:a:jetbrains:rubymine:2021.3.1:rc:*:*:*:*:*:*

cpe:2.3:a:jetbrains:webstorm:2021.3.1:preview:*:*:*:*:*:*

cpe:2.3:a:jetbrains:webstorm:2021.3.1:rc:*:*:*:*:*:*

EPSS

Процентиль: 0%

0.00005

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2021-45977

CVSS3: 9.8

debian

почти 4 года назад

JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, P ...

GHSA-pvh2-w6q4-6hqm

CVSS3: 9.8

github

почти 4 года назад

EPSS

Процентиль: 0%

0.00005

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo