Authentication Bypass in JetBrains TeamCity

CVE-2023-34228

What is CVE-2023-34228?

In JetBrains TeamCity versions prior to 2023.05, a significant vulnerability was identified due to missing authentication checks for critical account actions. This oversight allows attackers to perform sensitive operations without the necessary two-factor authentication (2FA) verification, leading to potential unauthorized access and manipulation of user accounts. Organizations using affected versions should prioritize applying available updates to mitigate the risks associated with this vulnerability.

References