PT-2023-5743 · Jetbrains · Jetbrains Teamcity+1

Caitlin Condon · Published 2023-09-19 · Updated 2026-02-27 · CVE-2023-42793

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2023.05.4

Description JetBrains TeamCity contains an authentication bypass vulnerability that allows unauthenticated attackers to gain administrative access to the server and execute arbitrary code. This vulnerability, identified as CVE-2023-42793, has been actively exploited by multiple threat actors, including those linked to North Korea (Diamond Sleet, Onyx Sleet, Lazarus Group) and Russia (APT29, CozyBear). Successful exploitation can lead to remote code execution, source code theft, and potential supply chain attacks. The vulnerability stems from insufficient access controls to the server's API. Several reports indicate that the vulnerability is being exploited in the wild, with attackers deploying malware and attempting to compromise systems. Approximately 1,200 vulnerable instances have been identified publicly.

Recommendations Update TeamCity to version 2023.05.4 or later. If updating is not immediately possible, install the security patch plugin provided by JetBrains.

Exploit

Fix

RCE

Authentication Bypass Using an Alternate Path or Channel

Missing Authentication

Weakness Enumeration

CWE-288

CWE-306

Related Identifiers

BDU:2023-06415

CVE-2023-42793

Affected Products

Jetbrains Teamcity

Teamcity

References · 300

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jetbrains_teamcity_rce_cve_2023_42793.rb · Exploit
• 🔥 https://github.com/H454NSec/CVE-2023-42793 · Exploit
• 🔥 https://github.com/Zyad-Elsayed/CVE-2023-42793 · Exploit
• 🔥 https://github.com/Zenmovie/CVE-2023-42793 · Exploit
• 🔥 http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html · Exploit
• 🔥 https://sonarsource.com/blog/teamcity-vulnerability · Exploit
• 🔥 https://exploit-db.com/exploits/51884 · Exploit
• https://jetbrains.com/privacy-security/issues-fixed · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-42793 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-06415 · Security Note
• https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/699319 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-42793 · Security Note
• https://blog.jetbrains.com/teamcity/2023/09/critical-security-issue-affecting-teamcity-on-premises-update-to-2023-05-4-now · Security Note
• https://twitter.com/fletch_ai/status/1755095816849543612 · Twitter Post