Published on July 4th, 2019 📆 | 5523 Views ⚑
0JetBrains YouTrack prior 2018.4.49168 Authorization privilege escalation
CVSS Meta Temp Score | Current Exploit Price (β) |
---|---|
5.3 | $0-$5k |
A vulnerability, which was classified as critical, has been found in JetBrains YouTrack. This issue affects some unknown processing of the component Authorization. The manipulation with an unknown input leads to a privilege escalation vulnerability. Using CWE to declare the problem leads to CWE-269. Impacted is confidentiality, integrity, and availability.
The weakness was disclosed 07/03/2019. The advisory is shared at blog.jetbrains.com. The identification of this vulnerability is CVE-2019-12866 since 06/17/2019. Neither technical details nor an exploit are publicly available.
Upgrading to version 2018.4.49168 eliminates this vulnerability.
The entries 137280, 137282, 137283 and 137287 are pretty similar.
Vendor
Name
VulDB Meta Base Score: 5.5
VulDB Meta Temp Score: 5.3
VulDB Base Score: β5.5
VulDB Temp Score: β5.3
VulDB Vector: π
VulDB Reliability: π
VulDB Base Score: π
VulDB Temp Score: π
VulDB Reliability: π
Class: Privilege escalation (CWE-269)
Local: Yes
Remote: No
Availability: π
Status: Not defined
Price Prediction: π
Current Price Estimation: π
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
Threat Intelligence
Threat: π
Adversaries: π
Geopolitics: π
Economy: π
Predictions: π
Remediation: πRecommended: Upgrade
Status: π
0-Day Time: π
Upgrade: YouTrack 2018.4.49168
06/17/2019 CVE assigned
07/03/2019 Advisory disclosed
07/04/2019 VulDB entry created
07/04/2019 VulDB last updateAdvisory: blog.jetbrains.com
CVE: CVE-2019-12866 (π)
See also: π
Created: 07/04/2019 11:08 AM
Complete: π
Comments
Upgrade your account now!
https://vuldb.com/?id.137297
No comments yet. Please log in to comment.