Jetbrains: Security Vulnerabilities
In JetBrains TeamCity version before 2022.10, Password parameters could be exposed in the build log if they contained special characters
CVSS Score
6.5
EPSS Score
0.006
Published
2022-11-03
In JetBrains TeamCity version between 2021.2 and 2022.10 access permissions for secure token health items were excessive
CVSS Score
2.7
EPSS Score
0.005
Published
2022-11-03
In JetBrains TeamCity version before 2022.10, Project Viewer could see scrambled secure values in the MetaRunner settings
CVSS Score
6.5
EPSS Score
0.006
Published
2022-11-03
In JetBrains TeamCity before 2022.04.4 environmental variables of "password" type could be logged when using custom Perforce executable
CVSS Score
4.4
EPSS Score
0.004
Published
2022-09-23
The installer of JetBrains IntelliJ IDEA before 2022.2.2 was vulnerable to EXE search order hijacking
CVSS Score
7.5
EPSS Score
0.003
Published
2022-09-19
JetBrains Ktor before 2.1.0 was vulnerable to the Reflect File Download attack
CVSS Score
4.7
EPSS Score
0.005
Published
2022-08-12
In JetBrains Ktor before 2.1.0 the wrong authentication provider could be selected in some cases
CVSS Score
5.3
EPSS Score
0.007
Published
2022-08-12
In JetBrains TeamCity before 2022.04.3 the private SSH key could be written to the server log in some cases
CVSS Score
3.2
EPSS Score
0.004
Published
2022-08-10
In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution
CVSS Score
4.1
EPSS Score
0.002
Published
2022-08-03
In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible
CVSS Score
3.9
EPSS Score
0.003
Published
2022-07-28