Authentication Bypass Using an Alternate Path or Channel

CVE-2025-24456

Medium

6.7/10

Summary

In JetBrains Hub before 2024.3.55417 privilege escalation was possible via LDAP authentication mapping

Attack Complexity: HIGH
Attack Vector: NETWORK
Integrity Impact: HIGH
Scope: UNCHANGED
User Interaction: REQUIRED
Privileges Required: LOW
Confidentiality Impact: HIGH
Availability Impact: LOW

CWE-288 - Authentication Bypass Using an Alternate Path or Channel

A product requires authentication, but the product has an alternate path or channel that does not require authentication.

References

Advisory Timeline

Published Jan 21, 2025