CVE-2020-7906

EPSS 0%
Published 30.01.2020 18:15:11
Last modified 21.11.2024 05:37:58
Source cve@mitre.org
Teams watchlist Login
Open Login

In JetBrains Rider versions 2019.3 EAP2 through 2019.3 EAP7, there were unsigned binaries provided by the Windows installer. This issue was fixed in release version 2019.3.

Affected products Warnungen 0 Metrics 3 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

JetBrains ≫ Rider Version2019.3.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0%	0

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-347 Improper Verification of Cryptographic Signature

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019/

Vendor Advisory

https://blog.jetbrains.com

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-7906

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-7906

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-7906

EUVD