CVE-2021-45977
JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, RubyMine 2021.3.1 RC, CLion 2021.3.1, WebStorm 2021.3.1 Preview, and WebStorm 2021.3.1 RC (used as Remote Development backend IDEs) bind to the 0.0.0.0 IP address. The fixed versions are: IntelliJ IDEA 2021.3.1, PyCharm Professional 2021.3.1, GoLand 2021.3.2, PhpStorm 2021.3.1 (213.6461.83), RubyMine 2021.3.1, CLion 2021.3.2, and WebStorm 2021.3.1.
Published:Feb 25, 2022
Last Modified:Nov 21, 2024
EPS:Feb 25, 2022
EPSS Score:0.00005
CVSS Score:9.8
Affected Products
Vendor
Product
Action
Vendor
Jetbrains
Product
Clion
Jetbrains
Clion
Vendor
Jetbrains
Product
Goland
Jetbrains
Goland
Vendor
Jetbrains
Product
Intellij Idea
Jetbrains
Intellij Idea
Vendor
Jetbrains
Product
Phpstorm
Jetbrains
Phpstorm
Vendor
Jetbrains
Product
Pycharm
Jetbrains
Pycharm
Vendor
Jetbrains
Product
Rubymine
Jetbrains
Rubymine
Vendor
Jetbrains
Product
Webstorm
Jetbrains
Webstorm
Exploits
No exploit reference
Common Weakness Enumeration
No CWE recorded yet
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
