Skip to content
OpenAdvisories
Unscored CVE-2020-7904 EUVD-2020-28836GHSA-7wmf-gjjp-37rv

In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS.

Published Jan 30, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

In JetBrains IntelliJ IDEA before 2019.3, some Maven repositories were accessed via HTTP instead of HTTPS.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 26.10 intellij-community-idea No fix yet —
Ubuntu 26.04 LTS intellij-community-idea No fix yet —
Ubuntu 25.10 intellij-community-idea No fix yet —
Ubuntu 24.04 LTS intellij-community-idea No fix yet —
Ubuntu 22.04 LTS intellij-community-idea No fix yet —

References