In JetBrains Toolbox App before 2.6 unencrypted credential transmission during SSH authentication was possible
CWE-319, CWE-319