PT-2023-24744 · Jetbrains · Teamcity

Publicado 2023-05-31 · Atualizado 2023-06-02 · CVE-2023-34219

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2023.05

Description The issue allows users without appropriate permissions to edit Build Configuration settings via the REST API due to improper permission checks.

Recommendations For versions prior to 2023.05, update to version 2023.05 or later to resolve the issue.

Correção

Incorrect Authorization

Improper Authorization

Enumeração de Fraquezas

CWE-863

CWE-285

Identificadores relacionados

CVE-2023-34219

Produtos afetados

Teamcity

Referências · 4

• https://jetbrains.com/privacy-security/issues-fixed · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-34219 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-34219 · Aviso do Fabricante
• https://t.me/cvenotify/51481 · Publicação no Telegram