In JetBrains YouTrack before 2019.2.59309, SMTP/Jabber settings could be accessed using backups.
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
Link | Tags |
---|---|
https://blog.jetbrains.com | vendor advisory |
https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019/ | vendor advisory |