CRITICAL🇬🇧 English

CVE-2021-45977

CVSS 9.8v3.1pub. 2022-02-25upd. 2024-11-21

JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, RubyMine 2021.3.1 RC, CLion 2021.3.1, WebStorm 2021.3.1 Preview, and WebStorm 2021.3.1 RC (used as Remote Development backend IDEs) bind to the 0.0.0.0 IP address. The fixed versions are: IntelliJ IDEA 2021.3.1, PyCharm Professional 2021.3.1, GoLand 2021.3.2, PhpStorm 2021.3.1 (213.6461.83), RubyMine 2021.3.1, CLion 2021.3.2, and WebStorm 2021.3.1.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Jetbrains Clion

    APP
    Jetbrains
    2021.3.1

  • Jetbrains Goland

    APP
    Jetbrains
    2021.3.1

  • Jetbrains Intellij Idea

    APP
    Jetbrains
    2021.3.1

  • Jetbrains Phpstorm

    APP
    Jetbrains
    2021.3.1

  • Jetbrains Pycharm

    APP
    Jetbrains
    2021.3.1

  • Jetbrains Rubymine

    APP
    Jetbrains
    2021.3.1

  • Jetbrains Webstorm

    APP
    Jetbrains
    2021.3.1
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2024-37051CRITICAL9.3PL ✓ten sam produkt

Wyciek tokenu GitHub do stron trzecich w JetBrains IDE

CVE-2021-31897CRITICAL9.8ten sam produkt

In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted proje...

CVE-2020-11690CRITICAL9.8ten sam produkt

In JetBrains IntelliJ IDEA before 2020.1, the license server could be resolved to an untrusted host in some ca...

CVE-2019-9823CRITICAL9.8ten sam produkt

In several JetBrains IntelliJ IDEA versions, creating remote run configurations of JavaEE application servers ...

CVE-2019-9186CRITICAL9.8ten sam produkt

In several JetBrains IntelliJ IDEA versions, a Spring Boot run configuration with the default setting allowed ...