CVE-2025-64685
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-11-10
Last updated on: 2025-11-21
Assigner: JetBrains s.r.o.
Description
Description
In JetBrains YouTrack before 2025.3.104432 missing TLS certificate validation enabled data disclosure
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| jetbrains | youtrack | to 2025.3.104432 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-295 | The product does not validate, or incorrectly validates, a certificate. |
Attack-Flow Graph
AI Powered Q&A
How can this vulnerability impact me? :
The vulnerability can result in data disclosure, meaning sensitive information could be exposed to unauthorized parties, potentially compromising confidentiality and security.
Can you explain this vulnerability to me?
This vulnerability in JetBrains YouTrack versions before 2025.3.104432 is caused by missing TLS certificate validation, which can lead to unauthorized disclosure of sensitive data.
Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70