Exposure of Base64 Encoded Password in JetBrains TeamCity
CVE-2025-31139

4.3MEDIUM

Key Information:

Vendor
Jetbrains
Status
Teamcity
Vendor
CVE Published:
27 March 2025

Summary

A vulnerability in JetBrains TeamCity exposes base64 encoded passwords in build logs, potentially allowing unauthorized access to sensitive information. Users running versions prior to 2025.03 are particularly at risk, as build logs may inadvertently reveal credentials. It is crucial for organizations to review their logging practices and apply necessary updates to mitigate this risk.

Affected Version(s)

TeamCity 0 < 2025.03

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.