PT-2022-16614 · Jetbrains · Teamcity

Christian Pedersen · Published 2022-02-08 · Updated 2023-08-08 · CVE-2022-24331

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2021.1.4

Description The issue allows for GitLab authentication impersonation. This means an attacker could potentially impersonate another user's identity, gaining unauthorized access to resources.

Recommendations For versions prior to 2021.1.4, update to version 2021.1.4 or later to resolve the issue.

Fix

Related Identifiers

CVE-2022-24331

Affected Products

Teamcity

References · 7

• https://blog.jetbrains.com · Vendor Advisory
• https://blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-24331 · Security Note
• https://osv.dev/vulnerability/CVE-2022-24331 · Vendor Advisory
• https://t.me/cvenotify/27392 · Telegram Post
• https://t.me/cibsecurity/38098 · Telegram Post
• https://t.me/cvenotify/27379 · Telegram Post