CVE-2019-9872

In several versions of JetBrains IntelliJ IDEA Ultimate, creating run configurations for cloud application servers leads to saving a cleartext unencrypted record of the server credentials in the IDE configuration files. If the Settings Repository plugin was then used and configured to synchronize IDE settings using a public repository, these credentials were published to this repository. The issue has been fixed in the following versions: 2019.1, 2018.3.5, 2018.2.8, and 2018.1.8.

• CWE-312
• CWE-522

• https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/Vendor Advisory
• https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/Vendor Advisory

Published

Jul 3, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9865When RPC is enabled in Wind River VxWorks 6.9 prior to 6.9.1…
• CVE-2019-9866An issue was discovered in GitLab Community and Enterprise E…
• CVE-2019-9867An issue was discovered in the Web Console in Veritas NetBac…
• CVE-2019-9868An issue was discovered in the Web Console in Veritas NetBac…
• CVE-2019-9870plugin.js in the w8tcha oEmbed plugin before 2019-03-14 for …
• CVE-2019-9871Jector Smart TV FM-K75 devices allow remote code execution b…
• CVE-2019-9873In several versions of JetBrains IntelliJ IDEA Ultimate, cre…
• CVE-2019-9874Deserialization of Untrusted Data in the Sitecore.Security.A…9.8
• CVE-2019-9875Deserialization of Untrusted Data in the anti CSRF module in…8.8
• CVE-2019-9877There is an invalid memory access vulnerability in the funct…
• CVE-2019-9878There is an invalid memory access in the function GfxIndexed…
• CVE-2019-9879The WPGraphQL 0.2.3 plugin for WordPress allows remote attac…