In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows,... · CVE-2020-11694 · GitHub Advisory Database · GitHub

In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows,...

Moderate severity Unreviewed Published May 24, 2022 to the GitHub Advisory Database • Updated Jan 29, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were included. This is fixed in 2019.2.6 and 2019.3.3.

References

Published by the National Vulnerability Database

Apr 10, 2020

Published to the GitHub Advisory Database May 24, 2022

Last updated Jan 29, 2023

Weaknesses

CWE-312

Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere. Learn more on MITRE.

CWE-522

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval. Learn more on MITRE.