Permanent Token Exposure in JetBrains YouTrack - JetBrains
CVE-2025-24457
5.5MEDIUM
Summary
In JetBrains YouTrack versions prior to 2024.3.55417, an issue has been identified where permanent tokens may inadvertently be exposed in application logs. This vulnerability can potentially allow unauthorized access to sensitive authentication tokens, leading to security risks for users. It is essential for users running affected versions to review their log management practices and update to the latest version of YouTrack to mitigate any potential risks. For further information and guidance on this issue, please refer to JetBrains' official security update page.
Affected Version(s)
YouTrack 0 < 2024.3.55417
References
CVSS V3.1
Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved