Information disclosure in the TeamCity plugin for IntelliJ before 2020.2.2.85899 was possible because a local temporary file had Insecure Permissions.
References
Link | Resource |
---|---|
https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/ | Vendor Advisory |
https://blog.jetbrains.com | Vendor Advisory |
Configurations
Information
Published : 2021-05-11 05:15
Updated : 2021-05-19 08:25
NVD link : CVE-2021-26309
Mitre link : CVE-2021-26309
JSON object : View
CWE
CWE-668
Exposure of Resource to Wrong Sphere
Products Affected
jetbrains
- teamcity