CVE-2022-48433: High severity intellij idea vulnerability
Published Mar 29, 2023
·Updated
In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built-in web server.
Affected Software
1 affected component
JetBrains IntelliJ IDEA<2023.1
Event History
Mar 29, 2023
CVE Published
via MITRE·12:07 PM
Data Sourced
via MITRE·12:07 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this JetBrains IntelliJ IDEA vulnerability?
The vulnerability ID for this JetBrains IntelliJ IDEA vulnerability is CVE-2022-48433.
2
What is the title of this vulnerability?
The title of this vulnerability is 'In JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built-in web server.'
3
What is the affected software for this vulnerability?
The affected software for this vulnerability is JetBrains IntelliJ IDEA up to exclusive version 2023.1.
4
What is the severity of this vulnerability?
The severity of this vulnerability is high with a CVSS score of 7.5.
5
How can I fix this vulnerability?
To fix this vulnerability, you should update JetBrains IntelliJ IDEA to version 2023.1 or a later version.