Credential Exposure in JetBrains TeamCity Affecting AWS Users
CVE-2025-57734

4.3MEDIUM

Key Information:

Vendor

Jetbrains
Status
Teamcity
Vendor
CVE Published:
20 August 2025

What is CVE-2025-57734?

In versions of JetBrains TeamCity prior to 2025.07.1, a security vulnerability has been identified that leads to the exposure of AWS credentials in Docker script files. This flaw can potentially allow unauthorized access to AWS resources, posing a significant risk to users who rely on this platform for their continuous integration and delivery processes. Users are encouraged to update to the latest version to mitigate this risk and enhance their security posture.

Affected Version(s)

TeamCity 0 < 2025.07.1

References

https://www.jetbrains.com/privacy-security/issues-fixed/

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.