Private Key Exposure in TeamCity Before 2024.03.3
CVE-2024-39878
5.3MEDIUM
What is CVE-2024-39878?
A vulnerability exists in JetBrains TeamCity, which potentially allows attackers to expose private keys during the testing phase of a GitHub App connection. This could lead to unauthorized access or manipulation of sensitive information handled by TeamCity. It is crucial for users to upgrade to version 2024.03.3 or later to mitigate the risks associated with this exposure. Proper configuration and security measures are essential to protect user data and application integrity.
Affected Version(s)
TeamCity 0 < 2024.03.3