{
  "document" : {
    "aggregate_severity" : {
      "text" : "hoch"
    },
    "category" : "csaf_base",
    "csaf_version" : "2.0",
    "distribution" : {
      "tlp" : {
        "label" : "WHITE",
        "url" : "https://www.first.org/tlp/"
      }
    },
    "lang" : "de-DE",
    "notes" : [ {
      "category" : "legal_disclaimer",
      "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."
    }, {
      "category" : "description",
      "text" : "IntelliJ IDEA ist eine Java Entwicklungsumgebung (IDE).\r\nPyCharm ist eine integrierte Entwicklungsumgebung (IDE) für Python Entwickler.\r\nPhpStorm ist eine Entwicklungsumgebung (IDE) für PHP.\r\nWebStorm ist eine Entwicklungsumgebung für JavaScript.\r\nCLion ist eine integrierte Entwicklungsumgebung für die Programmierung in C und C++.\r\n\r\n\r\nJetbrains DataGrip ist eine Datenbank IDE für SQL Entwickler.\r\nJetBrains DataSpell ist eine integrierte Entwicklungsumgebung (IDE) für Data Science und maschinelles Lernen.",
      "title" : "Produktbeschreibung"
    }, {
      "category" : "summary",
      "text" : "Ein entfernter, anonymer Angreifer kann eine Schwachstelle in JetBrains (IntelliJ IDEA , PyCharm, PhpStorm, WebStorm, CLion, DataGrip,  DataSpell) ausnutzen, um Sicherheitsvorkehrungen zu umgehen.",
      "title" : "Angriff"
    }, {
      "category" : "general",
      "text" : "- Linux\n- MacOS X\n- UNIX\n- Windows",
      "title" : "Betroffene Betriebssysteme"
    } ],
    "publisher" : {
      "category" : "other",
      "contact_details" : "csaf-provider@cert-bund.de",
      "name" : "Bundesamt für Sicherheit in der Informationstechnik",
      "namespace" : "https://www.bsi.bund.de"
    },
    "references" : [ {
      "category" : "self",
      "summary" : "WID-SEC-W-2026-4279 - CSAF Version",
      "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-4279.json"
    }, {
      "category" : "self",
      "summary" : "WID-SEC-2026-4279 - Portal Version",
      "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4279"
    }, {
      "category" : "external",
      "summary" : "National Vulnerability Database CVE-2026-118696 vom 2026-11-01",
      "url" : "https://nvd.nist.gov/vuln/detail/CVE-2026-118696"
    }, {
      "category" : "external",
      "summary" : "JetBrains Security Advisory vom 2026-11-01",
      "url" : "https://blog.jetbrains.com/security/2026/10/compromised-emudhra-certificates-ides/"
    } ],
    "source_lang" : "en-US",
    "title" : "JetBrains (IntelliJ IDEA , PyCharm, PhpStorm, WebStorm, CLion, DataGrip, DataSpell): Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen",
    "tracking" : {
      "current_release_date" : "2026-11-01T23:00:00.000+00:00",
      "generator" : {
        "date" : "2026-11-02T13:17:58.857+00:00",
        "engine" : {
          "name" : "BSI-WID",
          "version" : "1.7.0"
        }
      },
      "id" : "WID-SEC-W-2026-4279",
      "initial_release_date" : "2026-11-01T23:00:00.000+00:00",
      "revision_history" : [ {
        "date" : "2026-11-01T23:00:00.000+00:00",
        "number" : "1",
        "summary" : "Initiale Fassung"
      } ],
      "status" : "final",
      "version" : "1"
    }
  },
  "product_tree" : {
    "branches" : [ {
      "branches" : [ {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<2026.3",
          "product" : {
            "name" : "JetBrains CLion <2026.3",
            "product_id" : "T062273"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.3",
          "product" : {
            "name" : "JetBrains CLion 2026.3",
            "product_id" : "T062273-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:clion:2026.3"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2026.2.4.1",
          "product" : {
            "name" : "JetBrains CLion <2026.2.4.1",
            "product_id" : "T062274"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.2.4.1",
          "product" : {
            "name" : "JetBrains CLion 2026.2.4.1",
            "product_id" : "T062274-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:clion:2026.2.4.1"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2026.1.5.2",
          "product" : {
            "name" : "JetBrains CLion <2026.1.5.2",
            "product_id" : "T062275"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.1.5.2",
          "product" : {
            "name" : "JetBrains CLion 2026.1.5.2",
            "product_id" : "T062275-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:clion:2026.1.5.2"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2025.3.6.3",
          "product" : {
            "name" : "JetBrains CLion <2025.3.6.3",
            "product_id" : "T062276"
          }
        }, {
          "category" : "product_version",
          "name" : "2025.3.6.3",
          "product" : {
            "name" : "JetBrains CLion 2025.3.6.3",
            "product_id" : "T062276-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:clion:2025.3.6.3"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "CLion"
      }, {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<2026.3",
          "product" : {
            "name" : "JetBrains DataGrip <2026.3",
            "product_id" : "T062277"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.3",
          "product" : {
            "name" : "JetBrains DataGrip 2026.3",
            "product_id" : "T062277-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:datagrip:2026.3"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2026.2.6.1",
          "product" : {
            "name" : "JetBrains DataGrip <2026.2.6.1",
            "product_id" : "T062278"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.2.6.1",
          "product" : {
            "name" : "JetBrains DataGrip 2026.2.6.1",
            "product_id" : "T062278-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:datagrip:2026.2.6.1"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2026.1.4.1",
          "product" : {
            "name" : "JetBrains DataGrip <2026.1.4.1",
            "product_id" : "T062279"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.1.4.1",
          "product" : {
            "name" : "JetBrains DataGrip 2026.1.4.1",
            "product_id" : "T062279-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:datagrip:2026.1.4.1"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2025.3.6.1",
          "product" : {
            "name" : "JetBrains DataGrip <2025.3.6.1",
            "product_id" : "T062280"
          }
        }, {
          "category" : "product_version",
          "name" : "2025.3.6.1",
          "product" : {
            "name" : "JetBrains DataGrip 2025.3.6.1",
            "product_id" : "T062280-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:datagrip:2025.3.6.1"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2026.1.3.1",
          "product" : {
            "name" : "JetBrains DataSpell <2026.1.3.1",
            "product_id" : "T062285"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.1.3.1",
          "product" : {
            "name" : "JetBrains DataSpell 2026.1.3.1",
            "product_id" : "T062285-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:datagrip:2026.1.3.1"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "DataGrip"
      }, {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<2025.3.3.1",
          "product" : {
            "name" : "JetBrains DataSpell <2025.3.3.1",
            "product_id" : "T062286"
          }
        }, {
          "category" : "product_version",
          "name" : "2025.3.3.1",
          "product" : {
            "name" : "JetBrains DataSpell 2025.3.3.1",
            "product_id" : "T062286-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:dataspell:2025.3.3.1"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "DataSpell"
      }, {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<2026.3",
          "product" : {
            "name" : "JetBrains IntelliJ IDEA <2026.3",
            "product_id" : "T062245"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.3",
          "product" : {
            "name" : "JetBrains IntelliJ IDEA 2026.3",
            "product_id" : "T062245-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:intellij_idea:2026.3"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2026.2.4",
          "product" : {
            "name" : "JetBrains IntelliJ IDEA <2026.2.4",
            "product_id" : "T062246"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.2.4",
          "product" : {
            "name" : "JetBrains IntelliJ IDEA 2026.2.4",
            "product_id" : "T062246-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:intellij_idea:2026.2.4"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2026.1.5.1",
          "product" : {
            "name" : "JetBrains IntelliJ IDEA <2026.1.5.1",
            "product_id" : "T062247"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.1.5.1",
          "product" : {
            "name" : "JetBrains IntelliJ IDEA 2026.1.5.1",
            "product_id" : "T062247-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:intellij_idea:2026.1.5.1"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2025.3.6.2",
          "product" : {
            "name" : "JetBrains IntelliJ IDEA <2025.3.6.2",
            "product_id" : "T062248"
          }
        }, {
          "category" : "product_version",
          "name" : "2025.3.6.2",
          "product" : {
            "name" : "JetBrains IntelliJ IDEA 2025.3.6.2",
            "product_id" : "T062248-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:intellij_idea:2025.3.6.2"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "IntelliJ IDEA"
      }, {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<2026.3",
          "product" : {
            "name" : "JetBrains PhpStorm <2026.3",
            "product_id" : "T062253"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.3",
          "product" : {
            "name" : "JetBrains PhpStorm 2026.3",
            "product_id" : "T062253-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:phpstorm:2026.3"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2026.2.4",
          "product" : {
            "name" : "JetBrains PhpStorm <2026.2.4",
            "product_id" : "T062254"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.2.4",
          "product" : {
            "name" : "JetBrains PhpStorm 2026.2.4",
            "product_id" : "T062254-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:phpstorm:2026.2.4"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2026.1.5.1",
          "product" : {
            "name" : "JetBrains PhpStorm <2026.1.5.1",
            "product_id" : "T062255"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.1.5.1",
          "product" : {
            "name" : "JetBrains PhpStorm 2026.1.5.1",
            "product_id" : "T062255-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:phpstorm:2026.1.5.1"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2025.3.6.2",
          "product" : {
            "name" : "JetBrains PhpStorm <2025.3.6.2",
            "product_id" : "T062256"
          }
        }, {
          "category" : "product_version",
          "name" : "2025.3.6.2",
          "product" : {
            "name" : "JetBrains PhpStorm 2025.3.6.2",
            "product_id" : "T062256-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:phpstorm:2025.3.6.2"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "PhpStorm"
      }, {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<2026.3",
          "product" : {
            "name" : "JetBrains PyCharm <2026.3",
            "product_id" : "T062249"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.3",
          "product" : {
            "name" : "JetBrains PyCharm 2026.3",
            "product_id" : "T062249-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:pycharm:2026.3"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2026.2.4",
          "product" : {
            "name" : "JetBrains PyCharm <2026.2.4",
            "product_id" : "T062250"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.2.4",
          "product" : {
            "name" : "JetBrains PyCharm 2026.2.4",
            "product_id" : "T062250-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:pycharm:2026.2.4"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2026.1.5.1",
          "product" : {
            "name" : "JetBrains PyCharm <2026.1.5.1",
            "product_id" : "T062251"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.1.5.1",
          "product" : {
            "name" : "JetBrains PyCharm 2026.1.5.1",
            "product_id" : "T062251-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:pycharm:2026.1.5.1"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2025.3.6.2",
          "product" : {
            "name" : "JetBrains PyCharm <2025.3.6.2",
            "product_id" : "T062252"
          }
        }, {
          "category" : "product_version",
          "name" : "2025.3.6.2",
          "product" : {
            "name" : "JetBrains PyCharm 2025.3.6.2",
            "product_id" : "T062252-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:pycharm:2025.3.6.2"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "PyCharm"
      }, {
        "branches" : [ {
          "category" : "product_version_range",
          "name" : "<2026.3",
          "product" : {
            "name" : "JetBrains WebStorm <2026.3",
            "product_id" : "T062257"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.3",
          "product" : {
            "name" : "JetBrains WebStorm 2026.3",
            "product_id" : "T062257-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:webstorm:2026.3"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2026.2.4",
          "product" : {
            "name" : "JetBrains WebStorm <2026.2.4",
            "product_id" : "T062258"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.2.4",
          "product" : {
            "name" : "JetBrains WebStorm 2026.2.4",
            "product_id" : "T062258-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:webstorm:2026.2.4"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2026.1.5.1",
          "product" : {
            "name" : "JetBrains WebStorm <2026.1.5.1",
            "product_id" : "T062259"
          }
        }, {
          "category" : "product_version",
          "name" : "2026.1.5.1",
          "product" : {
            "name" : "JetBrains WebStorm 2026.1.5.1",
            "product_id" : "T062259-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:webstorm:2026.1.5.1"
            }
          }
        }, {
          "category" : "product_version_range",
          "name" : "<2025.3.6.2",
          "product" : {
            "name" : "JetBrains WebStorm <2025.3.6.2",
            "product_id" : "T062260"
          }
        }, {
          "category" : "product_version",
          "name" : "2025.3.6.2",
          "product" : {
            "name" : "JetBrains WebStorm 2025.3.6.2",
            "product_id" : "T062260-fixed",
            "product_identification_helper" : {
              "cpe" : "cpe:/a:jetbrains:webstorm:2025.3.6.2"
            }
          }
        } ],
        "category" : "product_name",
        "name" : "WebStorm"
      } ],
      "category" : "vendor",
      "name" : "JetBrains"
    } ]
  },
  "vulnerabilities" : [ {
    "cve" : "CVE-2026-118696",
    "product_status" : {
      "known_affected" : [ "T062260", "T062285", "T062280", "T062246", "T062247", "T062248", "T062249", "T062286", "T062245", "T062250", "T062251", "T062273", "T062252", "T062274", "T062257", "T062279", "T062258", "T062259", "T062253", "T062275", "T062254", "T062276", "T062255", "T062277", "T062256", "T062278" ]
    },
    "release_date" : "2026-11-01T23:00:00.000+00:00",
    "title" : "CVE-2026-118696"
  } ]
}