CVE-2019-12847

HIGH

JetBrains Hub < 2018.4.11298 - Cleartext Password Exposure in Audit Logs

Title source: llm
STIX 2.1

Description

In JetBrains Hub versions earlier than 2018.4.11298, the audit events for SMTPSettings show a cleartext password to the admin user. It is only relevant in cases where a password has not changed since 2017, and if the audit log still contains events from before that period.

References (1)

Core 1
Core References

Scores

CVSS v3 7.2
EPSS 0.0000
EPSS Percentile 0.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-522
Status published
Products (1)
jetbrains/hub < 2018.4.11298
Published Jul 03, 2019
Tracked Since Feb 18, 2026