JetBrains IntelliJ IDEA Ultimate prior 2018.1.8/2018.2.8/2018.3.5/2019.1 Configuration File Cleartext weak encryption

A vulnerability was found in JetBrains IntelliJ IDEA Ultimate. It has been rated as critical. Affected by this issue is an unknown code of the component Configuration File. The manipulation with an unknown input leads to a weak encryption vulnerability (Cleartext). Using CWE to declare the problem leads to CWE-312. Impacted is confidentiality, integrity, and availability.

The weakness was published 07/03/2019. The advisory is available at blog.jetbrains.com. This vulnerability is handled as CVE-2019-9872 since 03/19/2019. The technical details are unknown and an exploit is not available.

Upgrading to version 2018.1.8, 2018.2.8, 2018.3.5 or 2019.1 eliminates this vulnerability.

Similar entries are available at 137280, 137282, 137283 and 137287.

Vendor

• JetBrains

Name

• IntelliJ IDEA Ultimate

• 🔒

• 🔒

VulDB Meta Base Score: 5.5
VulDB Meta Temp Score: 5.3

VulDB Base Score: ≈5.5
VulDB Temp Score: ≈5.3
VulDB Vector: 🔒
VulDB Reliability: 🔍

VulDB Base Score: 🔒
VulDB Temp Score: 🔒
VulDB Reliability: 🔍
Class: Weak encryption / Cleartext (CWE-312)
Local: Yes
Remote: No

Availability: 🔒
Status: Not defined

Price Prediction: 🔍
Current Price Estimation: 🔒

Threat Intelligenceinfoedit

Threat: 🔍
Adversaries: 🔍
Geopolitics: 🔍
Economy: 🔍
Predictions: 🔍
Remediation: 🔍Recommended: Upgrade
Status: 🔍

0-Day Time: 🔒

Upgrade: IntelliJ IDEA Ultimate 2018.1.8/2018.2.8/2018.3.5/2019.1

03/19/2019 CVE assigned
07/03/2019 +106 days Advisory disclosed
07/04/2019 +1 days VulDB entry created
07/04/2019 +0 days VulDB last updateAdvisory: blog.jetbrains.com

CVE: CVE-2019-9872 (🔒)
See also: 🔒

Created: 07/04/2019 12:16 PM
Complete: 🔍

Comments

Comments are closed.