Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

CVE-2022-29820 | Mondoo Vulnerability Intelligence

Vulnerability IntelligenceCVE-2022-29820

CVE-2022-29820

LOW3.0

In JetBrains PyCharm before 2022

Published Apr 28, 2022

Modified 1 years ago

Fix available

Details

In JetBrains PyCharm before 2022.1 exposure of the debugger port to the internal network was possible

Affected Packages

pycharm

Debian 10Debian 11Debian 12Debian 13Fedora 39

Fixed in:

2022.1

pycharm-community

Ubuntu 14.04 LTSUbuntu 16.04 LTSUbuntu 18.04 LTSUbuntu 20.04 LTSUbuntu 22.04 LTS

Fixed in:

2022.1

pycharm-professional

Ubuntu 14.04 LTSUbuntu 16.04 LTSUbuntu 18.04 LTSUbuntu 20.04 LTSUbuntu 22.04 LTS

Fixed in:

2022.1

PyCharm

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1809) / Server 2019Windows 10 (1903)Windows 10 (1909)

Fixed in:

2022.1

PyCharm Community Edition

Windows 10 (1507)Windows 10 (1607) / Server 2016Windows 10 (1809) / Server 2019Windows 10 (1903)Windows 10 (1909)

Fixed in:

2022.1

PyCharm CE

macOS 14macOS 15macOS 26

Fixed in:

2022.1

References

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2022-29820

WEB

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS Analysis

CVSS v3.1

3.0

Exploitability

Attack Vector

AdjacentAV:A

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

RequiredUI:R

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

NoneI:N

Availability

NoneA:N

3/CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Weakness Type (CWE)

Other

CWE-1327

Ecosystems(42)

Debian 10 Debian 11 Debian 12 Debian 13 Fedora 39

Timeline

PublishedApr 28, 2022

ModifiedAug 3, 2024