CVE-2023-42793
Kritik CISA KEV: Aktif İstismarTeknik Veri (Otomatik)
- CVSS Skoru
- 9.8
- EPSS
- 100.0%
- CWE
- CWE-288
- KEV Durumu
- Evet
Yayım tarihi: 19 Eylül 2023 · CISA KEV son iyileştirme tarihi: 25 Ekim 2023
Etkilenen: jetbrains teamcity
JetBrains TeamCity 2023.05.4 sürümünden önceki sürümlerinde, TeamCity Sunucusu'nda RCE'ye yol açan bir kimlik doğrulama atlatma mümkündü
Orijinal açıklama (İngilizce)
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
Referanslar
- http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html
- https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793
- https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/
- https://www.jetbrains.com/privacy-security/issues-fixed/
- https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/
- https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited-to-hack-servers/
Bu CVE için henüz editoryal inceleme yapılmadı. Sadece otomatik teknik veri gösteriliyor.