Sensitive Data Logging Vulnerability in JetBrains TeamCity
CVE-2023-38064
4.3MEDIUM
What is CVE-2023-38064?
In JetBrains TeamCity prior to version 2023.05.1, a vulnerability exists where build chain parameters designated as 'password' type could unintentionally be recorded in the agent logs. This exposure poses significant risks as sensitive information may become accessible to unauthorized users, potentially leading to security breaches. Users are advised to upgrade to the latest version to mitigate this risk.
Affected Version(s)
TeamCity 0 < 2023.05.1