Improper Access Control in JetBrains Hub Affects User Token Security
CVE-2024-50573

5.4MEDIUM

Key Information:

Vendor

Jetbrains
Status
Hub
Vendor
CVE Published:
28 October 2024

What is CVE-2024-50573?

In JetBrains Hub, versions prior to 2024.3.47707, a vulnerability exists due to improper access control that permits unauthorized users to generate permanent tokens for services. This flaw may lead to unauthorized access and manipulation of essential services, exposing sensitive data and system resources. Organizations using affected versions should update to the latest release to mitigate potential risks associated with this vulnerability.

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.