Vulnerability Description
JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, RubyMine 2021.3.1 RC, CLion 2021.3.1, WebStorm 2021.3.1 Preview, and WebStorm 2021.3.1 RC (used as Remote Development backend IDEs) bind to the 0.0.0.0 IP address. The fixed versions are: IntelliJ IDEA 2021.3.1, PyCharm Professional 2021.3.1, GoLand 2021.3.2, PhpStorm 2021.3.1 (213.6461.83), RubyMine 2021.3.1, CLion 2021.3.2, and WebStorm 2021.3.1.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Jetbrains | Clion | 2021.3.1 |
| Jetbrains | Goland | 2021.3.1 |
| Jetbrains | Intellij Idea | 2021.3.1 |
| Jetbrains | Phpstorm | 2021.3.1 |
| Jetbrains | Pycharm | 2021.3.1 |
| Jetbrains | Rubymine | 2021.3.1 |
| Jetbrains | Webstorm | 2021.3.1 |
References
- https://blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021/Vendor Advisory
- https://jetbrains.comVendor Advisory
- https://blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021/Vendor Advisory
- https://jetbrains.comVendor Advisory
FAQ
What is CVE-2021-45977?
CVE-2021-45977 is a vulnerability with a CVSS score of 9.8 (CRITICAL). JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, Ruby...
How severe is CVE-2021-45977?
CVE-2021-45977 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2021-45977?
Check the references section above for vendor advisories and patch information. Affected products include: Jetbrains Clion, Jetbrains Goland, Jetbrains Intellij Idea, Jetbrains Phpstorm, Jetbrains Pycharm.