Until then, if anyone has useful advice, that would be appreciated. I'll post updates to this comment as I figure out what is happening. I just updated to 2022.2.2 and it loads my project and half way through loading it just quits, taking me back to the project selection modal/dialog. Ldd: warning: you do not have execution permission for `/opt/intellij-idea-ultimate-edition/jbr/lib/libcef.so' Probably due to a recent change in Arch, various gtk3-packages are not available by default anymore, which results in errors and warnings in Intellij.įor example: Caused by: : /opt/intellij-idea-ultimate-edition/jbr/lib/libawt_xawt.so: libXrender.so.1: cannot open shared object file: No such file or directoryĪnd: ldd /opt/intellij-idea-ultimate-edition/jbr/lib/libcef.so | grep 'not found' See 154233, 154238, 154240 for similar entries.I think this package should have a dependency 'gtk3' added. Upgrading to version 2020.1 eliminates this vulnerability.

The technical details are unknown and an exploit is not publicly available. The exploitation doesn't need any form of authentication. The exploitation appears to be difficult. This vulnerability is known as CVE-2020-11690 since. In JetBrains IntelliJ IDEA before 2020.1, the license server could be resolved to an untrusted host in some cases. As an impact it is known to affect confidentiality, integrity, and availability. This attack-focused weakness is caused by improperly implemented authentication schemes that are subject to spoofing attacks. The CWE definition for the vulnerability is CWE-290. The manipulation with an unknown input leads to a authentication spoofing vulnerability.

Affected by this vulnerability is an unknown code block of the component License Server. A high score indicates an elevated risk to be targeted for this vulnerability.Ī vulnerability classified as problematic was found in JetBrains IntelliJ IDEA. The CTI Interest Score identifies the interest of attackers and the security community for this specific vulnerability in real-time. Our Cyber Threat Intelligence team is monitoring different web sites, mailing lists, exploit markets and social media networks.

Intellij idea license