Session ID Exposure in JetBrains Code With Me for Local Network Attacks

CVE-2021-25755

Summary

Prior to version 2020.3, JetBrains Code With Me contained a vulnerability that allowed an attacker on the same local network to exploit knowledge of a session ID. By leveraging this session ID, the attacker could gain unauthorized access to the encrypted traffic exchanged within the application, potentially compromising sensitive information. It is crucial for users to update to the latest version to mitigate this concern.

References