Description

JetBrains MPS before 2019.2.2 exposed listening ports to the network.

Remediation

References

https://blog.jetbrains.com/blog/2019/10/29/jetbrains-security-bulletin-q3-2019/

Related Vulnerabilities

CVE-2019-1003056 Vulnerability in maven package org.jenkins-ci.plugins:websphere-deployer

CVE-2016-0763 Vulnerability in maven package org.apache.tomcat:tomcat-catalina

CVE-2023-28935 Vulnerability in maven package org.apache.uima:uima-ducc-parent

CVE-2018-15801 Vulnerability in maven package org.springframework.security:spring-security-oauth2-jose

CVE-2011-4838 Vulnerability in maven package org.jruby:jruby-core

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Vendor Advisory NVD-CWE-noinfo