PT-2022-27266 · Jetbrains · Teamcity

Published 2022-11-03 · Updated 2022-11-04 · CVE-2022-44622

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions 2021.2 through 2022.10

Description The issue concerns excessive access permissions for secure token health items.

Recommendations For versions 2021.2 through 2022.10, update to a version that addresses the excessive access permissions issue for secure token health items. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2022-44622

Affected Products

Teamcity

References · 4

• https://osv.dev/vulnerability/CVE-2022-44622 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-44622 · Security Note
• https://jetbrains.com/privacy-security/issues-fixed · Vendor Advisory
• https://t.me/cibsecurity/52503 · Telegram Post