JetBrains.TeamCity.CVE-2023-42793.Authentication.Bypass

Description

This indicates an attack attempt to exploit a Authentication Bypass Vulnerability in JetBrains TeamCity.
The vulnerability is due to improper validation on HTTP requests. A remote unauthenticated attacker could exploit the vulnerability by sending a crafted request to the target server. Successfully exploiting this vulnerability could lead to arbitrary code execution.

Outbreak Alert

Multiple Threat actors seen exploiting the authentication bypass flaw in JetBrains TeamCity that could lead to remote code execution. If compromised, they can access a TeamCity server, gaining entry to a software developer's source code, signing certificates, and the power to manipulate software building and deployment procedures. This access could also be misused by these malicious actors to carry out supply chain operations.

View the full Outbreak Alert Report

Affected Products

JetBrains TeamCity prior to 2023.05.4

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://www.jetbrains.com/privacy-security/issues-fixed/