TeamCity Application Token Exposure in EC2 Cloud Profile Settings
CVE-2024-39879

5.3MEDIUM

Key Information:

Vendor

Jetbrains
Status
Teamcity
Vendor
CVE Published:
1 July 2024

What is CVE-2024-39879?

The application token within JetBrains TeamCity prior to version 2024.03.3 has been found to be vulnerable to exposure in EC2 Cloud Profile settings. This security flaw may allow unauthorized users to gain access to sensitive tokens, potentially compromising the security of applications managed through TeamCity. Organizations using affected versions are advised to update promptly to mitigate risks associated with this vulnerability.

Affected Version(s)

TeamCity 0 < 2024.03.3

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.