Exposure of Base64 Encoded Password in JetBrains TeamCity
CVE-2025-31139

6.5MEDIUM

Key Information:

Vendor

Jetbrains
Status
Teamcity
Vendor
CVE Published:
27 March 2025

What is CVE-2025-31139?

A vulnerability in JetBrains TeamCity exposes base64 encoded passwords in build logs, potentially allowing unauthorized access to sensitive information. Users running versions prior to 2025.03 are particularly at risk, as build logs may inadvertently reveal credentials. It is crucial for organizations to review their logging practices and apply necessary updates to mitigate this risk.

Affected Version(s)

TeamCity 0 < 2025.03

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-31139 : Exposure of Base64 Encoded Password in JetBrains TeamCity