CVE-2023-42793

JetBrains TeamCity Authentication Bypass Vulnerability

Teamcity

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

19. Sep 2023

Ausgewertete Quellen

• Hersteller
  https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/
• Hersteller
  https://www.jetbrains.com/privacy-security/issues-fixed/
• Hinweis
  http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html
• Hinweis
  https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793
• Hinweis
  https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/
• Hinweis
  https://www.sonarsource.com/blog/teamcity-vulnerability/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-42793
• CISA
  JetBrains TeamCity Authentication Bypass Vulnerability
• NVD
  CVE-2023-42793