Incorrect Comparison

CVE-2021-37550

High

7.5/10

Summary

In JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used.

Attack Complexity: LOW
Attack Vector: NETWORK
Integrity Impact: HIGH
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: NONE
Confidentiality Impact: NONE
Availability Impact: NONE

CWE-697 - Incorrect Comparison

The software compares two entities in a security-relevant context, but the comparison is incorrect, which may lead to resultant weaknesses.

References

Advisory Timeline

Published Aug 06, 2021