Database/Control plane, storage & DevOps
JetBrains TeamCity: Authentication bypass leading to remote code execution on TeamCity Server
CVSS 9.8CVE-2023-42793Control plane, storage & DevOpsKnown exploitedcurated
Impact
Authentication bypass leading to remote code execution on TeamCity Server
Who can reach it
Network (remote)
What to do
Control-plane: upgrade; treat previously built artifacts as suspect
References
Related entries
- JetBrains TeamCity: Alternative-path authentication bypassCVE-2024-27198 · JetBrains TeamCityCritical
- JetBrains TeamCity: Deserialization in the agent polling protocolCVE-2026-63077 · JetBrains TeamCityCritical
- Acronis Cyber Infrastructure: Default passwordsCVE-2023-45249 · Acronis Cyber InfrastructureCritical
- Fortinet FortiClient EMS: Unauthenticated SQL injectionCVE-2023-48788 · Fortinet FortiClient EMSCritical
- Palo Alto PAN-OS: Management web interface authentication bypassCVE-2024-0012 · Palo Alto PAN-OSCritical
- OpenVPN (tap-windows6): Unchecked write sizeCVE-2024-1305 · OpenVPN (tap-windows6)Critical
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.