CVE-2020-27622: 
JetBrains IntelliJ IDEA vulnerability analysis and mitigation

In JetBrains IntelliJ IDEA before version 2020.2, a security vulnerability was identified where the built-in web server could expose information about the IDE version (JetBrains Blog, NVD).

The vulnerability has been assigned CVE-2020-27622 and received a CVSS v3.1 Base Score of 5.3 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. The vulnerability affects the built-in web server component of IntelliJ IDEA and could lead to information disclosure about the IDE version (NVD).

The vulnerability allows unauthorized access to information about the IDE version. While the severity is rated as Low, it could potentially provide attackers with version information that could be useful for targeting specific known vulnerabilities in the identified version (JetBrains Blog).

The vulnerability can be exploited remotely without requiring authentication or user interaction, as indicated by the CVSS metrics (AV:N/AC:L/PR:N/UI:N). However, the impact is limited to information disclosure about the IDE version (NVD).

The vulnerability was fixed in IntelliJ IDEA version 2020.2. Users are advised to upgrade to this version or later to address the security issue (JetBrains Blog).