First published: Thu Oct 31 2019(Updated: )
In JetBrains Hub versions earlier than 2019.1.11738, username enumeration was possible through password recovery.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
JetBrains Hub | <2019.1.11738 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this JetBrains Hub vulnerability is CVE-2019-18360.
The severity of CVE-2019-18360 is medium with a CVSS score of 5.3.
An attacker can exploit CVE-2019-18360 by performing username enumeration through password recovery in JetBrains Hub versions earlier than 2019.1.11738.
JetBrains Hub versions earlier than 2019.1.11738 are affected by CVE-2019-18360.
To fix CVE-2019-18360, upgrade to JetBrains Hub version 2019.1.11738 or later.