Vulnerability in Jetbrains Clion
CVE-2021-45977
JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Preview, PhpStorm 2021.3.1 RC, RubyMine 2021.3.1 Preview, RubyMine 2021.3.1 RC, CLion 2021.3.1, WebStorm 2021.3.1 Preview, and WebStorm 2021.3.1 RC (used as Remote Development backend IDEs) bind to the 0.0.0.0 IP address. The fixed versions are: IntelliJ IDEA 2021.3.1, PyCharm Professional 2021.3.1, GoLand 2021.3.2, PhpStorm 2021.3.1 (213.6461.83), RubyMine 2021.3.1, CLion 2021.3.2, and WebStorm 2021.3.1.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.011 (64.9th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 65th percentile — 64.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.011 · newest: 0.011 · change: 0.000
Affected products
- Jetbrains Clion — versions 2021.3.1
- Jetbrains Goland — versions 2021.3.1
- Jetbrains Intellij Idea — versions 2021.3.1
- Jetbrains Phpstorm — versions 2021.3.1
- Jetbrains Pycharm — versions 2021.3.1
- Jetbrains Rubymine — versions 2021.3.1
- Jetbrains Webstorm — versions 2021.3.1
References
- jetbrains.com (Vendor Advisory)
- blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021/ (Vendor Advisory)
Frequently asked questions
- What is CVE-2021-45977?
- CVE-2021-45977 is a critical-severity vulnerability in Jetbrains Clion. CVSS score: 9.8/10. Published 2022-02-25.
- How severe is CVE-2021-45977?
- Critical severity. CVSS v3 base score is 9.8 out of 10.