CVE-2023-42793

CVSS V2 None CVSS V3 None
Description
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
Overview
  • CVE ID
  • CVE-2023-42793
  • Assigner
  • JetBrains
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2023-09-19T16:57:29.245Z
  • Last Modified Date
  • 2023-09-19T16:57:29.245Z
Weakness Enumerations
CWE URL
CWE-288 http://cwe.mitre.org/data/definitions/288.html
References
Reference URL Reference Tags
https://www.jetbrains.com/privacy-security/issues-fixed/
https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/
http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html
https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793
https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited-to-hack-servers/
https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-42793
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-42793
History
Created Old Value New Value Data Type Notes
2024-06-25 13:31:21 Added to TrackCVE