NetSight
critical9.8

CVE-2019-9823

In several JetBrains IntelliJ IDEA versions, creating remote run configurations of JavaEE application servers leads to saving a cleartext record of the server …

Impact

In several JetBrains IntelliJ IDEA versions, creating remote run configurations of JavaEE application servers leads to saving a cleartext record of the server credentials in the IDE configuration files. The issue has been fixed in the following versions: 2018.3.5, 2018.2.8, 2018.1.8.

Affected products

VendorProductAffected versions
JetbrainsIntellij Idea
from 2018.1 before 2018.1.8
from 2018.2 before 2018.2.8
from 2018.3 before 2018.3.5

Weakness classification

References