CVE-2025-64682
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-11-10
Last updated on: 2025-11-20
Assigner: JetBrains s.r.o.
Description
Description
In JetBrains Hub before 2025.3.104432 a race condition allowed bypass of the Agent-user limit
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| jetbrains | hub | to 2025.3.104432 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-362 | The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a race condition in JetBrains Hub versions before 2025.3.104432 that allows bypassing the Agent-user limit.
How can this vulnerability impact me? :
The vulnerability could allow an attacker to bypass the Agent-user limit, potentially leading to unauthorized use or access beyond intended limits, though it has a low severity score and does not impact confidentiality or availability.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70