CVE-2023-34219

4.3MEDIUM

Key Information

Vendor: JetBrains
Status: TeamCity
Vendor: CVE Published:; 31 May 2023

Summary

In JetBrains TeamCity before 2023.05 improper permission checks allowed users without appropriate permissions to edit Build Configuration settings via REST API

Affected Version(s)

TeamCity < 2023.05

CVSS V3.1

Score:

4.3

Severity:

MEDIUM

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability Reserved.
May 31, 2023
Vulnerability published.
May 31, 2023

Collectors

NVD DatabaseMitre Database