JetBrains TeamCity Access Control Error Vulnerability (CNVD-2022-09214)

JetBrains TeamCity is a distributed build management and continuous integration tool from Czech company JetBrains (Jetbrains). The tool provides continuous unit testing, code quality analysis, and build issue analysis reports.JetBrains TeamCity has an access control error vulnerability that stems from the product’s lack of X-Frame-Options request headers, which can be exploited to bypass security restrictions.