CVE-2020-11685: High severity goland vulnerability
Published Apr 22, 2020
·Updated
In JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS.
Affected Software
1 affected component
JetBrains GoLand<2019.3.2
Event History
Apr 22, 2020
CVE Published
via MITRE·01:52 PM
Data Sourced
via MITRE·01:52 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-11685.
2
What is the severity of CVE-2020-11685?
The severity of CVE-2020-11685 is high with a CVSS score of 7.5.
3
How does this vulnerability affect JetBrains GoLand?
This vulnerability affects JetBrains GoLand versions up to (but not including) 2019.3.2.
4
What is the impact of this vulnerability?
The impact of this vulnerability is that the plugin repository in JetBrains GoLand is accessed via HTTP instead of HTTPS, which may expose sensitive data to potential attackers.
5
Is there a fix available for this vulnerability?
Yes, the fix for this vulnerability is to upgrade to JetBrains GoLand version 2019.3.2 or later.