CVE-2021-45977

Published: Feb 25, 2022Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, RubyMine 2021.3.1 RC, CLion 2021.3.1, WebStorm 2021.3.1 Preview, and WebStorm 2021.3.1 RC (used as Remote Development backend IDEs) bind to the 0.0.0.0 IP address. The fixed versions are: IntelliJ IDEA 2021.3.1, PyCharm Professional 2021.3.1, GoLand 2021.3.2, PhpStorm 2021.3.1 (213.6461.83), RubyMine 2021.3.1, CLion 2021.3.2, and WebStorm 2021.3.1.

Affected (11)

Products: Jetbrains: Clion, Goland, Intellij Idea, Phpstorm, Pycharm, Rubymine, Webstorm

7 products

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Jetbrains Clion	Version 2021.3.1
Jetbrains Goland	Version 2021.3.1
Jetbrains Intellij Idea	Version 2021.3.1 preview
Jetbrains Intellij Idea	Version 2021.3.1 rc
Jetbrains Phpstorm	Version 2021.3.1 preview
Jetbrains Phpstorm	Version 2021.3.1 rc
Jetbrains Pycharm	Version 2021.3.1 2021.3.1
Jetbrains Rubymine	Version 2021.3.1 preview
Jetbrains Rubymine	Version 2021.3.1 rc
Jetbrains Webstorm	Version 2021.3.1 preview
Jetbrains Webstorm	Version 2021.3.1 rc

References (4)

https://blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021/

Source: cve@mitre.org

Vendor Advisory

https://jetbrains.com

Source: cve@mitre.org

Vendor Advisory

https://blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://jetbrains.com

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.