PT-2020-19837 · Jetbrains · Teamcity

Published 2020-01-24 · Updated 2021-07-21 · CVE-2020-7908

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2019.1.5

Description The issue concerns reverse tabnabbing, which was possible on several pages. This means that an attacker could potentially manipulate the browser's behavior by opening a new tab with a malicious page, making it appear as if the new tab is related to the original page.

Recommendations For versions prior to 2019.1.5, update to version 2019.1.5 or later to resolve the issue.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2020-7908

Affected Products

Teamcity

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-7908 · Security Note
• https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019 · Vendor Advisory
• https://blog.jetbrains.com · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-7908 · Vendor Advisory
• https://t.me/cvenotify/659 · Telegram Post