CVE-2019-10104 Misconfiguration in n/a

Critical 9.8 Published 3 Jul 2019 Updated 4 Aug 2024

Remote attackers can execute code on developers' machines because the JMX server in IntelliJ IDEA Ultimate listens on all network interfaces by default.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2019-10104?

CVE-2019-10104 is a critical vulnerability in Jetbrains Intellij Idea, published on 3 Jul 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

In several JetBrains IntelliJ IDEA Ultimate versions, an Application Server run configuration (for Tomcat, Jetty, Resin, or CloudBees) with the default setting allowed a remote attacker to execute code when the configuration is running, because a JMX server listened on all interfaces instead of localhost only. The issue has been fixed in the following versions: 2018.3.4, 2018.2.8, 2018.1.8, and 2017.3.7.

Which versions are affected by CVE-2019-10104?

It affects 1 product.

Products include Jetbrains Intellij Idea.

How do I fix CVE-2019-10104?

No fix has been published for CVE-2019-10104 yet. Limit exposure of the affected software until one is available.

Is CVE-2019-10104 being exploited?

There is no known exploitation of CVE-2019-10104 in the wild and no public exploit code.

All Jetbrains Intellij Idea vulnerabilities

Sources

Also known as GHSA-rgqx-jpvm-7pfp, UBUNTU-CVE-2019-10104.