CVE-2023-42793
JetBrains TeamCity Authentication Bypass Vulnerability
CVSS
—
Sem CVSS
EPSS
100.0%
p100
KEV
SIM
4 de out. de 2023
Exploit Today
80
0-100
Publicado: — · Última mod.: —
Produto
JetBrains / TeamCity
Vulnerabilidade
JetBrains TeamCity Authentication Bypass Vulnerability
Adicionado ao KEV
4 de out. de 2023
Corrigir até
25 de out. de 2023
Uso conhecido em ransomware
Sim
Descrição resumida
JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execution on TeamCity Server.
Ação necessária
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notas
https://blog.jetbrains.com/teamcity/2023/09/critical-security-issue-affecting-teamcity-on-premises-update-to-2023-05-4-now/ ; https://nvd.nist.gov/vuln/detail/CVE-2023-42793