PT-2021-21707 · Jetbrains · Teamcity

Published 2021-08-05 · Updated 2021-08-12 · CVE-2021-37548

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2021.1

Description The issue allows passwords in cleartext to be stored in VCS under certain conditions.

Recommendations For versions prior to 2021.1, update to version 2021.1 or later to resolve the issue.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2021-37548

Affected Products

Teamcity

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-37548 · Security Note
• https://blog.jetbrains.com/blog/2021/08/05/jetbrains-security-bulletin-q2-2021 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-37548 · Vendor Advisory