Vulnerability-Lookup

BDU:2024-04477

Vulnerability from fstec - Published: 10.06.2024

Title

Description

Уязвимость плагина JetBrains GitHub интегрированных сред разработки программного обеспечения JetBrains Aqua, CLion, DataGrip, DataSpell, GoLand, IntelliJ IDEA, MPS, PhpStorm, PyCharm, Rider, RubyMine, RustRover, WebStorm связана с недостаточной защитой регистрационных данных. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, повысить свои привилегии путём получения токена доступа

Severity ?


                    
                      AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Vendor

JetBrains

Software Name

Aqua, Clion, Datagrip, Dataspell, Goland, IntelliJ IDEA, mps, PHPStorm, PYCharm, Rider, Rubymine, rustrover, WebStorm

Software Version

до 2024.1.2 (Aqua), до 2023.1.7 (Clion), от 2023.2.0 до 2023.2.4 (Clion), от 2023.3.0 до 2023.3.5 (Clion), от 2024.1.0 до 2024.1.3 (Clion), от 2023.1.0 до 2023.1.3 (Datagrip), от 2023.2.0 до 2023.2.4 (Datagrip), от 2023.3.0 до 2023.3.5 (Datagrip), от 2024.1.0 до 2024.1.4 (Datagrip), до 2023.1.6 (Dataspell), от 2023.2.0 до 2023.2.7 (Dataspell), от 2023.3.0 до 2023.3.6 (Dataspell), от 2024.1.0 до 2024.1.2 (Dataspell), до 2023.1.6 (Goland), от 2023.2.0 до 2023.2.7 (Goland), от 2023.3.0 до 2023.3.7 (Goland), от 2024.1.0 до 2024.1.3 (Goland), до 2023.1.7 (IntelliJ IDEA), от 2023.2.0 до 2023.2.7 (IntelliJ IDEA), от 2023.3.0 до 2023.3.7 (IntelliJ IDEA), от 2024.1.0 до 2024.1.3 (IntelliJ IDEA), до 2023.2.1 (mps), 2023.3.0 (mps), до 2023.1.6 (PHPStorm), от 2023.2.0 до 2023.2.6 (PHPStorm), от 2023.3.0 до 2023.3.7 (PHPStorm), от 2024.1.0 до 2024.1.3 (PHPStorm), до 2023.1.6 (PYCharm), от 2023.2.0 до 2023.2.7 (PYCharm), от 2023.3.0 до 2023.3.6 (PYCharm), от 2024.1.0 до 2024.1.3 (PYCharm), до 2023.1.7 (Rider), от 2023.2.0 до 2023.2.5 (Rider), от 2023.3.0 до 2023.3.6 (Rider), от 2024.1.0 до 2024.1.3 (Rider), до 2023.1.7 (Rubymine), от 2023.2.0 до 2023.2.7 (Rubymine), от 2023.3.0 до 2023.3.7 (Rubymine), от 2024.1.0 до 2024.1.3 (Rubymine), до 2024.1.1 (rustrover), до 2023.1.6 (WebStorm), от 2023.2.0 до 2023.2.7 (WebStorm), от 2023.3.0 до 2023.3.7 (WebStorm), от 2024.1.0 до 2024.1.4 (WebStorm)

Possible Mitigations

Установка обновлений из доверенных источников. В связи со сложившейся обстановкой и введенными санкциями против Российской Федерации рекомендуется устанавливать обновления программного обеспечения только после оценки всех сопутствующих рисков. Компенсирующие меры: - отзыв токенов доступа GitHub, используемые плагином; - отмена доступа к приложению интеграции JetBrains IDE; - удаление токена, выданного для плагина; - использование средств межсетевого экранирования для ограничения возможности удалённого доступа. Использование рекомендаций производителя: https://www.jetbrains.com/privacy-security/issues-fixed/

Reference

https://www.jetbrains.com/privacy-security/issues-fixed/

CWE

CWE-522

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:C/I:C/A:N",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "JetBrains",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 2024.1.2 (Aqua), \u0434\u043e 2023.1.7 (Clion), \u043e\u0442 2023.2.0 \u0434\u043e 2023.2.4 (Clion), \u043e\u0442 2023.3.0 \u0434\u043e 2023.3.5 (Clion), \u043e\u0442 2024.1.0 \u0434\u043e 2024.1.3 (Clion), \u043e\u0442 2023.1.0 \u0434\u043e 2023.1.3 (Datagrip), \u043e\u0442 2023.2.0 \u0434\u043e 2023.2.4 (Datagrip), \u043e\u0442 2023.3.0 \u0434\u043e 2023.3.5 (Datagrip), \u043e\u0442 2024.1.0 \u0434\u043e 2024.1.4 (Datagrip), \u0434\u043e 2023.1.6 (Dataspell), \u043e\u0442 2023.2.0 \u0434\u043e 2023.2.7 (Dataspell), \u043e\u0442 2023.3.0 \u0434\u043e 2023.3.6 (Dataspell), \u043e\u0442 2024.1.0 \u0434\u043e 2024.1.2 (Dataspell), \u0434\u043e 2023.1.6 (Goland), \u043e\u0442 2023.2.0 \u0434\u043e 2023.2.7 (Goland), \u043e\u0442 2023.3.0 \u0434\u043e 2023.3.7 (Goland), \u043e\u0442 2024.1.0 \u0434\u043e 2024.1.3 (Goland), \u0434\u043e 2023.1.7 (IntelliJ IDEA), \u043e\u0442 2023.2.0 \u0434\u043e 2023.2.7 (IntelliJ IDEA), \u043e\u0442 2023.3.0 \u0434\u043e 2023.3.7 (IntelliJ IDEA), \u043e\u0442 2024.1.0 \u0434\u043e 2024.1.3 (IntelliJ IDEA), \u0434\u043e 2023.2.1 (mps), 2023.3.0 (mps), \u0434\u043e 2023.1.6 (PHPStorm), \u043e\u0442 2023.2.0 \u0434\u043e 2023.2.6 (PHPStorm), \u043e\u0442 2023.3.0 \u0434\u043e 2023.3.7 (PHPStorm), \u043e\u0442 2024.1.0 \u0434\u043e 2024.1.3 (PHPStorm), \u0434\u043e 2023.1.6 (PYCharm), \u043e\u0442 2023.2.0 \u0434\u043e 2023.2.7 (PYCharm), \u043e\u0442 2023.3.0 \u0434\u043e 2023.3.6 (PYCharm), \u043e\u0442 2024.1.0 \u0434\u043e 2024.1.3 (PYCharm), \u0434\u043e 2023.1.7 (Rider), \u043e\u0442 2023.2.0 \u0434\u043e 2023.2.5 (Rider), \u043e\u0442 2023.3.0 \u0434\u043e 2023.3.6 (Rider), \u043e\u0442 2024.1.0 \u0434\u043e 2024.1.3 (Rider), \u0434\u043e 2023.1.7 (Rubymine), \u043e\u0442 2023.2.0 \u0434\u043e 2023.2.7 (Rubymine), \u043e\u0442 2023.3.0 \u0434\u043e 2023.3.7 (Rubymine), \u043e\u0442 2024.1.0 \u0434\u043e 2024.1.3 (Rubymine), \u0434\u043e 2024.1.1 (rustrover), \u0434\u043e 2023.1.6 (WebStorm), \u043e\u0442 2023.2.0 \u0434\u043e 2023.2.7 (WebStorm), \u043e\u0442 2023.3.0 \u0434\u043e 2023.3.7 (WebStorm), \u043e\u0442 2024.1.0 \u0434\u043e 2024.1.4 (WebStorm)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432.\n\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441\u043e \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0435\u0439\u0441\u044f \u043e\u0431\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u0438 \u0432\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0430\u043d\u043a\u0446\u0438\u044f\u043c\u0438 \u043f\u0440\u043e\u0442\u0438\u0432 \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0439 \u0424\u0435\u0434\u0435\u0440\u0430\u0446\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u0432\u0441\u0435\u0445 \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0440\u0438\u0441\u043a\u043e\u0432.\n\n\u041a\u043e\u043c\u043f\u0435\u043d\u0441\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u043c\u0435\u0440\u044b:\n- \u043e\u0442\u0437\u044b\u0432 \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 GitHub, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u043c;\n- \u043e\u0442\u043c\u0435\u043d\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 JetBrains IDE;\n- \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u0442\u043e\u043a\u0435\u043d\u0430, \u0432\u044b\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u043f\u043b\u0430\u0433\u0438\u043d\u0430;\n- \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://www.jetbrains.com/privacy-security/issues-fixed/",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "10.06.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "13.06.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "13.06.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-04477",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2024-37051",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Aqua, Clion, Datagrip, Dataspell, Goland, IntelliJ IDEA, mps, PHPStorm, PYCharm, Rider, Rubymine, rustrover, WebStorm",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d\u0430 JetBrains GitHub \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f JetBrains Aqua, CLion, DataGrip, DataSpell, GoLand, IntelliJ IDEA, MPS, PhpStorm, PyCharm, Rider, RubyMine, RustRover, WebStorm, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-522)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d\u0430 JetBrains GitHub \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f JetBrains Aqua, CLion, DataGrip, DataSpell, GoLand, IntelliJ IDEA, MPS, PhpStorm, PyCharm, Rider, RubyMine, RustRover, WebStorm \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043f\u0443\u0442\u0451\u043c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u043a\u0435\u043d\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u0431\u043e\u0440 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.jetbrains.com/privacy-security/issues-fixed/",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u041f\u041e \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0418\u0418",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-522",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 9,4)\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 9,3)"
}

CVE-2024-37051 (GCVE-0-2024-37051)

Vulnerability from cvelistv5 – Published: 2024-06-10 15:58 – Updated: 2025-02-13 17:52

Summary

GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2; DataGrip 2023.1.3, 2023.2.4, 2023.3.5, 2024.1.4; DataSpell 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.2, 2024.2 EAP1; GoLand 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; MPS 2023.2.1, 2023.3.1, 2024.1 EAP2; PhpStorm 2023.1.6, 2023.2.6, 2023.3.7, 2024.1.3, 2024.2 EAP3; PyCharm 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.3, 2024.2 EAP2; Rider 2023.1.7, 2023.2.5, 2023.3.6, 2024.1.3; RubyMine 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP4; RustRover 2024.1.1; WebStorm 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.4

Severity ?

9.3 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

CWE

CWE-522 - Insufficiently Protected Credentials

Assigner

JetBrains

References

URL

Tags

	https://www.jetbrains.com/privacy-security/issues…
	https://security.netapp.com/advisory/ntap-2024070…

Impacted products

Vendor

Product

Version

JetBrains

IntelliJ IDEA

Affected: 2023.1 , < 2023.1.7 (semver)
Affected: 2023.1 , < 2023.2.7 (semver)
Affected: 2023.1 , < 2023.3.7 (semver)
Affected: 2023.1 , < 2024.1.3 (semver)
Affected: 2023.1 , < 2024.2 EAP3 (semver)

JetBrains	Aqua	Affected: 0 , < 2024.1.2 (semver)
JetBrains	CLion	Affected: 2023.1 , < 2023.1.7 (semver) Affected: 2023.1 , < 2023.2.4 (semver) Affected: 2023.1 , < 2023.3.5 (semver) Affected: 2023.1 , < 2024.1.3 (semver) Affected: 2023.1 , < 2024.2 EAP2 (semver)
JetBrains	DataGrip	Affected: 2023.1 , < 2023.1.3 (semver) Affected: 2023.1 , < 2023.2.4 (semver) Affected: 2023.1 , < 2023.3.5 (semver) Affected: 2023.1 , < 2024.1.4 (semver)
JetBrains	DataSpell	Affected: 2023.1 , < 2023.1.6 (semver) Affected: 2023.1 , < 2023.2.7 (semver) Affected: 2023.1 , < 2023.3.6 (semver) Affected: 2023.1 , < 2024.1.2 (semver) Affected: 2023.1 , < 2024.2 EAP1 (semver)
JetBrains	GoLand	Affected: 2023.1 , < 2023.1.6 (semver) Affected: 2023.1 , < 2023.2.7 (semver) Affected: 2023.1 , < 2023.3.7 (semver) Affected: 2023.1 , < 2024.1.3 (semver) Affected: 2023.1 , < 2024.2 EAP3 (semver)
JetBrains	MPS	Affected: 2023.1 , < 2023.2.1 (semver) Affected: 2023.1 , < 2023.3.1 (semver) Affected: 2023.1 , < 2024.1 EAP2 (semver)
JetBrains	PhpStorm	Affected: 2023.1 , < 2023.1.6 (semver) Affected: 2023.1 , < 2023.2.6 (semver) Affected: 2023.1 , < 2023.3.7 (semver) Affected: 2023.1 , < 2024.1.3 (semver) Affected: 2023.1 , < 2024.2 EAP3 (semver)
JetBrains	PyCharm	Affected: 2023.1 , < 2023.1.6 (semver) Affected: 2023.1 , < 2023.2.7 (semver) Affected: 2023.1 , < 2023.3.6 (semver) Affected: 2023.1 , < 2024.1.3 (semver) Affected: 2023.1 , < 2024.2 EAP2 (semver)
JetBrains	Rider	Affected: 2023.1 , < 2023.1.7 (semver) Affected: 2023.1 , < 2023.2.5 (semver) Affected: 2023.1 , < 2023.3.6 (semver) Affected: 2023.1 , < 2024.1.3 (semver)
JetBrains	RubyMine	Affected: 2023.1 , < 2023.1.7 (semver) Affected: 2023.1 , < 2023.2.7 (semver) Affected: 2023.1 , < 2023.3.7 (semver) Affected: 2023.1 , < 2024.1.3 (semver) Affected: 2023.1 , < 2024.2 EAP4 (semver)
JetBrains	RustRover	Affected: 0 , < 2024.1.1 (semver)
JetBrains	WebStorm	Affected: 2023.1 , < 2023.1.6 (semver) Affected: 2023.1 , < 2023.2.7 (semver) Affected: 2023.1 , < 2023.3.7 (semver) Affected: 2023.1 , < 2024.1.4 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:intellij_idea:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "intellij_idea",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.1.7",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:intellij_idea:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "intellij_idea",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.2.7",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:intellij_idea:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "intellij_idea",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.3.7",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:intellij_idea:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "intellij_idea",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:intellij_idea:-:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "intellij_idea",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2024.2 EAP3",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:aqua:2024.1.2:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "aqua",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2024.1.2",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:clion:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "clion",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.1.7",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:clion:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "clion",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.2.4",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:clion:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "clion",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.3.5",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:clion:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "clion",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:datagrip:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "datagrip",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2024.1.4",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:dataspell:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dataspell",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.1.6",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:clion:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "clion",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2024.2_eap2",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:datagrip:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "datagrip",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.1.3",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:datagrip:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "datagrip",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.2.4",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:datagrip:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "datagrip",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.3.5",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:dataspell:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dataspell",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.2.7",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:dataspell:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dataspell",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.3.6",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:dataspell:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dataspell",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2024.1.2",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:dataspell:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "dataspell",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2024.2 EAP1",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:goland:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "goland",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.1.6",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:goland:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "goland",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.2.7",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:goland:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "goland",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.3.7",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:goland:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "goland",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:goland:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "goland",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2024.2 EAP3",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:mps:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mps",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.2.1",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:mps:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mps",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.3.1",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:mps:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "mps",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2024.1 EAP2",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:phpstorm:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "phpstorm",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.1.6",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:phpstorm:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "phpstorm",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.2.6",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:phpstorm:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "phpstorm",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.3.7",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:phpstorm:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "phpstorm",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:phpstorm:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "phpstorm",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2024.2 EAP3",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:pycharm:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pycharm",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.1.6",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:pycharm:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pycharm",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.2.7",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:pycharm:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pycharm",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.3.6",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:pycharm:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pycharm",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:pycharm:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "pycharm",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2024.2 EAP2",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:rider:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "rider",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.1.7",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:rider:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "rider",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.2.5",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:rider:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "rider",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.3.6",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:clion:2023.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "clion",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:rubymine:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "rubymine",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.1.7",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:rubymine:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "rubymine",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.2.7",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:rubymine:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "rubymine",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.3.7",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:rubymine:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "rubymine",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2024.1.3",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:rubymine:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "rubymine",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2024.2 EAP4",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:rustrover:2024.1.1:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "rustrover",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2024.1.1",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:webstorm:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "webstorm",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.1.6",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:webstorm:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "webstorm",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.2.7",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:webstorm:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "webstorm",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2023.3.7",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:jetbrains:webstorm:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "webstorm",
            "vendor": "jetbrains",
            "versions": [
              {
                "lessThan": "2024.1.4",
                "status": "affected",
                "version": "2023.1",
                "versionType": "custom"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-37051",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-06-17T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-17T03:55:09.096Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T03:43:50.910Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.jetbrains.com/privacy-security/issues-fixed/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20240705-0004/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "IntelliJ IDEA",
          "vendor": "JetBrains",
          "versions": [
            {
              "lessThan": "2023.1.7",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2023.2.7",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2023.3.7",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2024.2 EAP3",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Aqua",
          "vendor": "JetBrains",
          "versions": [
            {
              "lessThan": "2024.1.2",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "CLion",
          "vendor": "JetBrains",
          "versions": [
            {
              "lessThan": "2023.1.7",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2023.2.4",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2023.3.5",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2024.2 EAP2",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "DataGrip",
          "vendor": "JetBrains",
          "versions": [
            {
              "lessThan": "2023.1.3",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2023.2.4",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2023.3.5",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2024.1.4",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "DataSpell",
          "vendor": "JetBrains",
          "versions": [
            {
              "lessThan": "2023.1.6",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2023.2.7",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2023.3.6",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2024.1.2",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2024.2 EAP1",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "GoLand",
          "vendor": "JetBrains",
          "versions": [
            {
              "lessThan": "2023.1.6",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2023.2.7",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2023.3.7",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2024.2 EAP3",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "MPS",
          "vendor": "JetBrains",
          "versions": [
            {
              "lessThan": "2023.2.1",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2023.3.1",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2024.1 EAP2",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "PhpStorm",
          "vendor": "JetBrains",
          "versions": [
            {
              "lessThan": "2023.1.6",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2023.2.6",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2023.3.7",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2024.2 EAP3",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "PyCharm",
          "vendor": "JetBrains",
          "versions": [
            {
              "lessThan": "2023.1.6",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2023.2.7",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2023.3.6",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2024.2 EAP2",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Rider",
          "vendor": "JetBrains",
          "versions": [
            {
              "lessThan": "2023.1.7",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2023.2.5",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2023.3.6",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RubyMine",
          "vendor": "JetBrains",
          "versions": [
            {
              "lessThan": "2023.1.7",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2023.2.7",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2023.3.7",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2024.1.3",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2024.2 EAP4",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "RustRover",
          "vendor": "JetBrains",
          "versions": [
            {
              "lessThan": "2024.1.1",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "WebStorm",
          "vendor": "JetBrains",
          "versions": [
            {
              "lessThan": "2023.1.6",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2023.2.7",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2023.3.7",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            },
            {
              "lessThan": "2024.1.4",
              "status": "affected",
              "version": "2023.1",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2; DataGrip 2023.1.3, 2023.2.4, 2023.3.5, 2024.1.4; DataSpell 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.2, 2024.2 EAP1; GoLand 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; MPS 2023.2.1, 2023.3.1, 2024.1 EAP2; PhpStorm 2023.1.6, 2023.2.6, 2023.3.7, 2024.1.3, 2024.2 EAP3; PyCharm 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.3, 2024.2 EAP2; Rider 2023.1.7, 2023.2.5, 2023.3.6, 2024.1.3; RubyMine 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP4; RustRover 2024.1.1; WebStorm 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.4"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.3,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-522",
              "description": "CWE-522: Insufficiently Protected Credentials",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-07-05T16:06:01.631Z",
        "orgId": "547ada31-17d8-4964-bc5f-1b8238ba8014",
        "shortName": "JetBrains"
      },
      "references": [
        {
          "url": "https://www.jetbrains.com/privacy-security/issues-fixed/"
        },
        {
          "url": "https://security.netapp.com/advisory/ntap-20240705-0004/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "547ada31-17d8-4964-bc5f-1b8238ba8014",
    "assignerShortName": "JetBrains",
    "cveId": "CVE-2024-37051",
    "datePublished": "2024-06-10T15:58:06.021Z",
    "dateReserved": "2024-05-31T14:05:53.462Z",
    "dateUpdated": "2025-02-13T17:52:58.741Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

BDU:2024-04477

CVE-2024-37051 (GCVE-0-2024-37051)

Tags

Sightings

Nomenclature