Sensitive Data Logging Vulnerability in JetBrains TeamCity
CVE-2023-38064

4.3MEDIUM

Key Information:

Vendor

Jetbrains
Status
Teamcity
Vendor
CVE Published:
12 July 2023

What is CVE-2023-38064?

In JetBrains TeamCity prior to version 2023.05.1, a vulnerability exists where build chain parameters designated as 'password' type could unintentionally be recorded in the agent logs. This exposure poses significant risks as sensitive information may become accessible to unauthorized users, potentially leading to security breaches. Users are advised to upgrade to the latest version to mitigate this risk.

Affected Version(s)

TeamCity 0 < 2023.05.1

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.