CVE-2020-11694: 
JetBrains PyCharm vulnerability analysis and mitigation

In JetBrains PyCharm 2019.2.5 and 2019.3 on Windows, Apple Notarization Service credentials were included in the software distribution. This vulnerability was identified and tracked as CVE-2020-11694. The issue was discovered by Ruby Nealon and was fixed in PyCharm versions 2019.2.6 and 2019.3.3 (JetBrains Blog).

The vulnerability involved the unintended inclusion of Apple Notarization Service credentials in PyCharm distributions for Windows platforms. This represented a significant security risk as it exposed sensitive authentication credentials. The issue was rated as High severity according to JetBrains' security assessment (JetBrains Blog).

The exposure of Apple Notarization Service credentials could potentially allow unauthorized access to JetBrains' Apple developer resources and services. This could potentially be exploited for malicious purposes, including the ability to notarize unauthorized software using JetBrains' credentials (CVE Mitre).

JetBrains addressed this vulnerability by releasing patched versions: PyCharm 2019.2.6 and 2019.3.3. Users of affected versions should upgrade to these or later versions to mitigate the security risk. The fix involved removing the exposed credentials from the software distribution (JetBrains Blog).