IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
9.3Crítica

CVE-2024-37051

JetBrains IntelliJ IDEA; JetBrains Aqua; JetBrains CLion; JetBrains DataGrip Publicada: (hace 2 años)

Descripción

GitHub access token could be exposed to third-party sites in JetBrains IDEs after version 2023.1 and less than: IntelliJ IDEA 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; Aqua 2024.1.2; CLion 2023.1.7, 2023.2.4, 2023.3.5, 2024.1.3, 2024.2 EAP2; DataGrip 2023.1.3, 2023.2.4, 2023.3.5, 2024.1.4; DataSpell 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.2, 2024.2 EAP1; GoLand 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP3; MPS 2023.2.1, 2023.3.1, 2024.1 EAP2; PhpStorm 2023.1.6, 2023.2.6, 2023.3.7, 2024.1.3, 2024.2 EAP3; PyCharm 2023.1.6, 2023.2.7, 2023.3.6, 2024.1.3, 2024.2 EAP2; Rider 2023.1.7, 2023.2.5, 2023.3.6, 2024.1.3; RubyMine 2023.1.7, 2023.2.7, 2023.3.7, 2024.1.3, 2024.2 EAP4; RustRover 2024.1.1; WebStorm 2023.1.6, 2023.2.7, 2023.3.7, 2024.1.4

Debilidad (CWE): CWE-522

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
JetBrains Aqua < 2024.1.2
JetBrains CLion 2023.1 – < 2023.1.7, 2023.1 – < 2023.2.4, 2023.1 – < 2023.3.5, 2023.1 – < 2024.1.3, 2023.1 – < 2024.2 EAP2
JetBrains DataGrip 2023.1 – < 2023.1.3, 2023.1 – < 2023.2.4, 2023.1 – < 2023.3.5, 2023.1 – < 2024.1.4
JetBrains DataSpell 2023.1 – < 2023.1.6, 2023.1 – < 2023.2.7, 2023.1 – < 2023.3.6, 2023.1 – < 2024.1.2, 2023.1 – < 2024.2 EAP1
JetBrains GoLand 2023.1 – < 2023.1.6, 2023.1 – < 2023.2.7, 2023.1 – < 2023.3.7, 2023.1 – < 2024.1.3, 2023.1 – < 2024.2 EAP3
JetBrains IntelliJ IDEA 2023.1 – < 2023.1.7, 2023.1 – < 2023.2.7, 2023.1 – < 2023.3.7, 2023.1 – < 2024.1.3, 2023.1 – < 2024.2 EAP3
JetBrains MPS 2023.1 – < 2023.2.1, 2023.1 – < 2023.3.1, 2023.1 – < 2024.1 EAP2
JetBrains PhpStorm 2023.1 – < 2023.1.6, 2023.1 – < 2023.2.6, 2023.1 – < 2023.3.7, 2023.1 – < 2024.1.3, 2023.1 – < 2024.2 EAP3
JetBrains PyCharm 2023.1 – < 2023.1.6, 2023.1 – < 2023.2.7, 2023.1 – < 2023.3.6, 2023.1 – < 2024.1.3, 2023.1 – < 2024.2 EAP2
JetBrains Rider 2023.1 – < 2023.1.7, 2023.1 – < 2023.2.5, 2023.1 – < 2023.3.6, 2023.1 – < 2024.1.3
JetBrains RubyMine 2023.1 – < 2023.1.7, 2023.1 – < 2023.2.7, 2023.1 – < 2023.3.7, 2023.1 – < 2024.1.3, 2023.1 – < 2024.2 EAP4
JetBrains RustRover < 2024.1.1
JetBrains WebStorm 2023.1 – < 2023.1.6, 2023.1 – < 2023.2.7, 2023.1 – < 2023.3.7, 2023.1 – < 2024.1.4

Referencias y parches

Coincidencias CPE (NVD) (44)
  • cpe:2.3:a:jetbrains:aqua:*:*:*:*:*:*:*:* < 2024.1.2
  • cpe:2.3:a:jetbrains:clion:*:*:*:*:*:*:*:* < 2023.1.7
  • cpe:2.3:a:jetbrains:clion:*:*:*:*:*:*:*:* ≥ 2023.2.0 < 2023.2.4
  • cpe:2.3:a:jetbrains:clion:*:*:*:*:*:*:*:* ≥ 2023.3.0 < 2023.3.5
  • cpe:2.3:a:jetbrains:clion:*:*:*:*:*:*:*:* ≥ 2024.1.0 < 2024.1.3
  • cpe:2.3:a:jetbrains:datagrip:*:*:*:*:*:*:*:* ≥ 2023.1.0 < 2023.1.3
  • cpe:2.3:a:jetbrains:datagrip:*:*:*:*:*:*:*:* ≥ 2023.2.0 < 2023.2.4
  • cpe:2.3:a:jetbrains:datagrip:*:*:*:*:*:*:*:* ≥ 2023.3.0 < 2023.3.5
  • cpe:2.3:a:jetbrains:datagrip:*:*:*:*:*:*:*:* ≥ 2024.1.0 < 2024.1.4
  • cpe:2.3:a:jetbrains:dataspell:*:*:*:*:*:*:*:* < 2023.1.6
  • cpe:2.3:a:jetbrains:dataspell:*:*:*:*:*:*:*:* ≥ 2023.2.0 < 2023.2.7
  • cpe:2.3:a:jetbrains:dataspell:*:*:*:*:*:*:*:* ≥ 2023.3.0 < 2023.3.6
  • cpe:2.3:a:jetbrains:dataspell:*:*:*:*:*:*:*:* ≥ 2024.1.0 < 2024.1.2
  • cpe:2.3:a:jetbrains:goland:*:*:*:*:*:*:*:* < 2023.1.6
  • cpe:2.3:a:jetbrains:goland:*:*:*:*:*:*:*:* ≥ 2023.2.0 < 2023.2.7
  • cpe:2.3:a:jetbrains:goland:*:*:*:*:*:*:*:* ≥ 2023.3.0 < 2023.3.7
  • cpe:2.3:a:jetbrains:goland:*:*:*:*:*:*:*:* ≥ 2024.1.0 < 2024.1.3
  • cpe:2.3:a:jetbrains:intellij_idea:*:*:*:*:*:*:*:* < 2023.1.7
  • cpe:2.3:a:jetbrains:intellij_idea:*:*:*:*:*:*:*:* ≥ 2023.2.0 < 2023.2.7
  • cpe:2.3:a:jetbrains:intellij_idea:*:*:*:*:*:*:*:* ≥ 2023.3.0 < 2023.3.7
  • cpe:2.3:a:jetbrains:intellij_idea:*:*:*:*:*:*:*:* ≥ 2024.1.0 < 2024.1.3
  • cpe:2.3:a:jetbrains:mps:*:*:*:*:*:*:*:* < 2023.2.1
  • cpe:2.3:a:jetbrains:mps:2023.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:phpstorm:*:*:*:*:*:*:*:* < 2023.1.6
  • cpe:2.3:a:jetbrains:phpstorm:*:*:*:*:*:*:*:* ≥ 2023.2.0 < 2023.2.6
  • cpe:2.3:a:jetbrains:phpstorm:*:*:*:*:*:*:*:* ≥ 2023.3.0 < 2023.3.7
  • cpe:2.3:a:jetbrains:phpstorm:*:*:*:*:*:*:*:* ≥ 2024.1.0 < 2024.1.3
  • cpe:2.3:a:jetbrains:pycharm:*:*:*:*:*:*:*:* < 2023.1.6
  • cpe:2.3:a:jetbrains:pycharm:*:*:*:*:*:*:*:* ≥ 2023.2.0 < 2023.2.7
  • cpe:2.3:a:jetbrains:pycharm:*:*:*:*:*:*:*:* ≥ 2023.3.0 < 2023.3.6
  • cpe:2.3:a:jetbrains:pycharm:*:*:*:*:*:*:*:* ≥ 2024.1.0 < 2024.1.3
  • cpe:2.3:a:jetbrains:rider:*:*:*:*:*:*:*:* < 2023.1.7
  • cpe:2.3:a:jetbrains:rider:*:*:*:*:*:*:*:* ≥ 2023.2.0 < 2023.2.5
  • cpe:2.3:a:jetbrains:rider:*:*:*:*:*:*:*:* ≥ 2023.3.0 < 2023.3.6
  • cpe:2.3:a:jetbrains:rider:*:*:*:*:*:*:*:* ≥ 2024.1.0 < 2024.1.3
  • cpe:2.3:a:jetbrains:rubymine:*:*:*:*:*:*:*:* < 2023.1.7
  • cpe:2.3:a:jetbrains:rubymine:*:*:*:*:*:*:*:* ≥ 2023.2.0 < 2023.2.7
  • cpe:2.3:a:jetbrains:rubymine:*:*:*:*:*:*:*:* ≥ 2023.3.0 < 2023.3.7
  • cpe:2.3:a:jetbrains:rubymine:*:*:*:*:*:*:*:* ≥ 2024.1.0 < 2024.1.3
  • cpe:2.3:a:jetbrains:rustrover:*:*:*:*:*:*:*:* < 2024.1.1
  • cpe:2.3:a:jetbrains:webstorm:*:*:*:*:*:*:*:* < 2023.1.6
  • cpe:2.3:a:jetbrains:webstorm:*:*:*:*:*:*:*:* ≥ 2023.2.0 < 2023.2.7
  • cpe:2.3:a:jetbrains:webstorm:*:*:*:*:*:*:*:* ≥ 2023.3.0 < 2023.3.7
  • cpe:2.3:a:jetbrains:webstorm:*:*:*:*:*:*:*:* ≥ 2024.1.0 < 2024.1.4