Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-12866

An Insecure Direct Object Reference, with Authorization Bypass through a User-Controlled Key, was possible in JetBrains YouTrack. The issue was fixed in 2018.4.49168.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 0.2%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2019-12866
  • Jetbrains » Youtrack » Version: N/A
    cpe:2.3:a:jetbrains:youtrack:-
  • Jetbrains » Youtrack » Version: 2.19.2.65515
    cpe:2.3:a:jetbrains:youtrack:2.19.2.65515
  • Jetbrains » Youtrack » Version: 2.2.1
    cpe:2.3:a:jetbrains:youtrack:2.2.1
  • Jetbrains » Youtrack » Version: 2017.1.30791
    cpe:2.3:a:jetbrains:youtrack:2017.1.30791
  • Jetbrains » Youtrack » Version: 2017.1.30867
    cpe:2.3:a:jetbrains:youtrack:2017.1.30867
  • Jetbrains » Youtrack » Version: 2017.1.30973
    cpe:2.3:a:jetbrains:youtrack:2017.1.30973
  • Jetbrains » Youtrack » Version: 2017.1.31650
    cpe:2.3:a:jetbrains:youtrack:2017.1.31650
  • Jetbrains » Youtrack » Version: 2017.2.32529
    cpe:2.3:a:jetbrains:youtrack:2017.2.32529
  • Jetbrains » Youtrack » Version: 2017.2.32582
    cpe:2.3:a:jetbrains:youtrack:2017.2.32582
  • Jetbrains » Youtrack » Version: 2017.2.32799
    cpe:2.3:a:jetbrains:youtrack:2017.2.32799
  • Jetbrains » Youtrack » Version: 2017.2.32853
    cpe:2.3:a:jetbrains:youtrack:2017.2.32853
  • Jetbrains » Youtrack » Version: 2017.2.33063
    cpe:2.3:a:jetbrains:youtrack:2017.2.33063
  • Jetbrains » Youtrack » Version: 2017.2.33154
    cpe:2.3:a:jetbrains:youtrack:2017.2.33154
  • Jetbrains » Youtrack » Version: 2017.2.33372
    cpe:2.3:a:jetbrains:youtrack:2017.2.33372
  • Jetbrains » Youtrack » Version: 2017.2.33390
    cpe:2.3:a:jetbrains:youtrack:2017.2.33390
  • Jetbrains » Youtrack » Version: 2017.2.33766
    cpe:2.3:a:jetbrains:youtrack:2017.2.33766
  • Jetbrains » Youtrack » Version: 2017.2.34279
    cpe:2.3:a:jetbrains:youtrack:2017.2.34279
  • Jetbrains » Youtrack » Version: 2017.2.34480
    cpe:2.3:a:jetbrains:youtrack:2017.2.34480
  • Jetbrains » Youtrack » Version: 2017.2.35124
    cpe:2.3:a:jetbrains:youtrack:2017.2.35124
  • Jetbrains » Youtrack » Version: 2017.3.35488
    cpe:2.3:a:jetbrains:youtrack:2017.3.35488
  • Jetbrains » Youtrack » Version: 2017.3.35968
    cpe:2.3:a:jetbrains:youtrack:2017.3.35968
  • Jetbrains » Youtrack » Version: 2017.3.36019
    cpe:2.3:a:jetbrains:youtrack:2017.3.36019
  • Jetbrains » Youtrack » Version: 2017.3.36369
    cpe:2.3:a:jetbrains:youtrack:2017.3.36369
  • Jetbrains » Youtrack » Version: 2017.3.36626
    cpe:2.3:a:jetbrains:youtrack:2017.3.36626
  • Jetbrains » Youtrack » Version: 2017.3.36743
    cpe:2.3:a:jetbrains:youtrack:2017.3.36743
  • Jetbrains » Youtrack » Version: 2017.3.37116
    cpe:2.3:a:jetbrains:youtrack:2017.3.37116
  • Jetbrains » Youtrack » Version: 2017.3.37517
    cpe:2.3:a:jetbrains:youtrack:2017.3.37517
  • Jetbrains » Youtrack » Version: 2017.4.37623
    cpe:2.3:a:jetbrains:youtrack:2017.4.37623
  • Jetbrains » Youtrack » Version: 2017.4.37933
    cpe:2.3:a:jetbrains:youtrack:2017.4.37933
  • Jetbrains » Youtrack » Version: 2017.4.38030
    cpe:2.3:a:jetbrains:youtrack:2017.4.38030
  • Jetbrains » Youtrack » Version: 2017.4.38399
    cpe:2.3:a:jetbrains:youtrack:2017.4.38399
  • Jetbrains » Youtrack » Version: 2017.4.39083
    cpe:2.3:a:jetbrains:youtrack:2017.4.39083
  • Jetbrains » Youtrack » Version: 2017.4.39238
    cpe:2.3:a:jetbrains:youtrack:2017.4.39238
  • Jetbrains » Youtrack » Version: 2017.4.39406
    cpe:2.3:a:jetbrains:youtrack:2017.4.39406
  • Jetbrains » Youtrack » Version: 2017.4.39533
    cpe:2.3:a:jetbrains:youtrack:2017.4.39533
  • Jetbrains » Youtrack » Version: 2018.1.39916
    cpe:2.3:a:jetbrains:youtrack:2018.1.39916
  • Jetbrains » Youtrack » Version: 2018.1.40025
    cpe:2.3:a:jetbrains:youtrack:2018.1.40025
  • Jetbrains » Youtrack » Version: 2018.1.40066
    cpe:2.3:a:jetbrains:youtrack:2018.1.40066
  • Jetbrains » Youtrack » Version: 2018.1.40341
    cpe:2.3:a:jetbrains:youtrack:2018.1.40341
  • Jetbrains » Youtrack » Version: 2018.1.40840
    cpe:2.3:a:jetbrains:youtrack:2018.1.40840
  • Jetbrains » Youtrack » Version: 2018.1.41051
    cpe:2.3:a:jetbrains:youtrack:2018.1.41051
  • Jetbrains » Youtrack » Version: 2018.1.41561
    cpe:2.3:a:jetbrains:youtrack:2018.1.41561
  • Jetbrains » Youtrack » Version: 2018.1.41826
    cpe:2.3:a:jetbrains:youtrack:2018.1.41826
  • Jetbrains » Youtrack » Version: 2018.2.42133
    cpe:2.3:a:jetbrains:youtrack:2018.2.42133
  • Jetbrains » Youtrack » Version: 2018.2.42223
    cpe:2.3:a:jetbrains:youtrack:2018.2.42223
  • Jetbrains » Youtrack » Version: 2018.2.42284
    cpe:2.3:a:jetbrains:youtrack:2018.2.42284
  • Jetbrains » Youtrack » Version: 2018.2.42337
    cpe:2.3:a:jetbrains:youtrack:2018.2.42337
  • Jetbrains » Youtrack » Version: 2018.2.42881
    cpe:2.3:a:jetbrains:youtrack:2018.2.42881
  • Jetbrains » Youtrack » Version: 2018.2.43142
    cpe:2.3:a:jetbrains:youtrack:2018.2.43142
  • Jetbrains » Youtrack » Version: 2018.2.44329
    cpe:2.3:a:jetbrains:youtrack:2018.2.44329
  • Jetbrains » Youtrack » Version: 2018.2.45073
    cpe:2.3:a:jetbrains:youtrack:2018.2.45073
  • Jetbrains » Youtrack » Version: 2018.2.45146
    cpe:2.3:a:jetbrains:youtrack:2018.2.45146
  • Jetbrains » Youtrack » Version: 2018.2.45513
    cpe:2.3:a:jetbrains:youtrack:2018.2.45513
  • Jetbrains » Youtrack » Version: 2018.3.46358
    cpe:2.3:a:jetbrains:youtrack:2018.3.46358
  • Jetbrains » Youtrack » Version: 2018.3.46581
    cpe:2.3:a:jetbrains:youtrack:2018.3.46581
  • Jetbrains » Youtrack » Version: 2018.3.46727
    cpe:2.3:a:jetbrains:youtrack:2018.3.46727
  • Jetbrains » Youtrack » Version: 2018.3.47010
    cpe:2.3:a:jetbrains:youtrack:2018.3.47010
  • Jetbrains » Youtrack » Version: 2018.3.47078
    cpe:2.3:a:jetbrains:youtrack:2018.3.47078
  • Jetbrains » Youtrack » Version: 2018.3.47109
    cpe:2.3:a:jetbrains:youtrack:2018.3.47109
  • Jetbrains » Youtrack » Version: 2018.3.47247
    cpe:2.3:a:jetbrains:youtrack:2018.3.47247
  • Jetbrains » Youtrack » Version: 2018.3.47965
    cpe:2.3:a:jetbrains:youtrack:2018.3.47965
  • Jetbrains » Youtrack » Version: 2018.3.48045
    cpe:2.3:a:jetbrains:youtrack:2018.3.48045
  • Jetbrains » Youtrack » Version: 2018.4.48293
    cpe:2.3:a:jetbrains:youtrack:2018.4.48293
  • Jetbrains » Youtrack » Version: 2018.4.48406
    cpe:2.3:a:jetbrains:youtrack:2018.4.48406
  • Jetbrains » Youtrack » Version: 2018.4.48733
    cpe:2.3:a:jetbrains:youtrack:2018.4.48733
  • Jetbrains » Youtrack » Version: 3.3
    cpe:2.3:a:jetbrains:youtrack:3.3
  • Jetbrains » Youtrack » Version: 4.2.4
    cpe:2.3:a:jetbrains:youtrack:4.2.4
  • Jetbrains » Youtrack » Version: 5.2.5
    cpe:2.3:a:jetbrains:youtrack:5.2.5
  • Jetbrains » Youtrack » Version: 6.0.12124
    cpe:2.3:a:jetbrains:youtrack:6.0.12124
  • Jetbrains » Youtrack » Version: 6.0.12634
    cpe:2.3:a:jetbrains:youtrack:6.0.12634
  • Jetbrains » Youtrack » Version: 6.5.17031
    cpe:2.3:a:jetbrains:youtrack:6.5.17031
  • Jetbrains » Youtrack » Version: 6.5.17057
    cpe:2.3:a:jetbrains:youtrack:6.5.17057
  • Jetbrains » Youtrack » Version: 6.5.17105
    cpe:2.3:a:jetbrains:youtrack:6.5.17105
  • Jetbrains » Youtrack » Version: 6.5.17122
    cpe:2.3:a:jetbrains:youtrack:6.5.17122
  • Jetbrains » Youtrack » Version: 7.0.26198
    cpe:2.3:a:jetbrains:youtrack:7.0.26198
  • Jetbrains » Youtrack » Version: 7.0.26630
    cpe:2.3:a:jetbrains:youtrack:7.0.26630
  • Jetbrains » Youtrack » Version: 7.0.26754
    cpe:2.3:a:jetbrains:youtrack:7.0.26754
  • Jetbrains » Youtrack » Version: 7.0.26927
    cpe:2.3:a:jetbrains:youtrack:7.0.26927
  • Jetbrains » Youtrack » Version: 7.0.27676
    cpe:2.3:a:jetbrains:youtrack:7.0.27676
  • Jetbrains » Youtrack » Version: 7.0.27705
    cpe:2.3:a:jetbrains:youtrack:7.0.27705
  • Jetbrains » Youtrack » Version: 7.0.27777
    cpe:2.3:a:jetbrains:youtrack:7.0.27777
  • Jetbrains » Youtrack » Version: 7.0.27965
    cpe:2.3:a:jetbrains:youtrack:7.0.27965
  • Jetbrains » Youtrack » Version: 7.0.28110
    cpe:2.3:a:jetbrains:youtrack:7.0.28110
  • Jetbrains » Youtrack » Version: 7.0.28450
    cpe:2.3:a:jetbrains:youtrack:7.0.28450
  • Jetbrains » Youtrack » Version: 7.0.28958
    cpe:2.3:a:jetbrains:youtrack:7.0.28958
  • Jetbrains » Youtrack » Version: 7.0.29566
    cpe:2.3:a:jetbrains:youtrack:7.0.29566


Contact Us

Shodan ® - All rights reserved