PT-2021-21705 · Jetbrains · Teamcity

Published 2021-08-05 · Updated 2022-07-12 · CVE-2021-37546

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2021.1

Description The issue is related to an insecure key generation mechanism for encrypted properties.

Recommendations For versions prior to 2021.1, update to version 2021.1 or later to resolve the issue.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2021-37546

Affected Products

Teamcity

References · 4

• https://osv.dev/vulnerability/CVE-2021-37546 · Vendor Advisory
• https://blog.jetbrains.com/blog/2021/08/05/jetbrains-security-bulletin-q2-2021 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-37546 · Security Note
• https://t.me/cibsecurity/26954 · Telegram Post