CVE-2023-42793—JetBrains TeamCity Authentication Bypass Vulnerability

漏洞名称

JetBrains TeamCity Authentication Bypass Vulnerability

描述

JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execution on TeamCity Server.

已知用于勒索软件活动吗？

勒索软件状态：

KNOWN

采集行动

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

其他说明

• https://blog.jetbrains.com/teamcity/2023/09/critical-security-issue-affecting-teamcity-on-premises-update-to-2023-05-4-now/
• https://nvd.nist.gov/vuln/detail/CVE-2023-42793

相关新闻文章

• BadPilot network hacking campaign fuels Russian SandWorm attacksFebruary 12, 2025
• Microsoft Uncovers Sandworm Subgroup's Global Cyber Attacks Spanning 15+ CountriesFebruary 12, 2025
• CISA Warns of Threat Actors Exploiting F5 BIG-IP Cookies for Network ReconnaissanceOctober 11, 2024
• US, UK warn of Russian APT29 hackers targeting Zimbra, TeamCity serversOctober 10, 2024

相关 CWE

• CWE-288