CVE-2023-42793
קריטית 9.8 מנוצלת בשטח (KEV) בשימוש בכופרה
ניצול פעיל מאומת — קטלוג CISA KEV
- שם
- JetBrains TeamCity Authentication Bypass Vulnerability
- נוסף לקטלוג
- יעד טיפול (פדרלי)
- פעולה נדרשת
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
תיאור (מקור, אנגלית)
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
מדדים
- CVSS 3.1
-
9.8 (CRITICAL)
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 100% (אחוזון 100) נכון ל-25/7/2026
- CWE
- CWE-288, CWE-306
מוצרים מושפעים
jetbrains: teamcity
קישורים
- https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-… Vendor Advisory
- https://www.jetbrains.com/privacy-security/issues-fixed/ Vendor Advisory
- https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-… Vendor Advisory
- https://www.jetbrains.com/privacy-security/issues-fixed/ Vendor Advisory
- http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated… ExploitThird Party AdvisoryVDB Entry
- https://www.sonarsource.com/blog/teamcity-vulnerability/ ExploitThird Party Advisory
- http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated… ExploitThird Party AdvisoryVDB Entry
- https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793 Third Party Advisory
- https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authen… Broken LinkThird Party Advisory
- https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited… Press/Media Coverage