PT-2025-31128 · Jetbrains · Teamcity

Published 2025-07-28 · Updated 2025-07-28 · CVE-2025-54538

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2025.07

Description A security issue was identified in JetBrains TeamCity where password exposure was possible via the command line during the "hg pull" command.

Recommendations Update JetBrains TeamCity to version 2025.07 or later.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

BDU:2025-09155

CVE-2025-54538

Affected Products

Teamcity

References · 6

• https://osv.dev/vulnerability/CVE-2025-54538 · Vendor Advisory
• https://jetbrains.com/privacy-security/issues-fixed · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54538 · Security Note
• https://bdu.fstec.ru/vul/2025-09155 · Security Note
• https://twitter.com/CVEnew/status/1949876357762002982 · Twitter Post
• https://t.me/CVEtracker/28599 · Telegram Post