JetBrains TeamCity Elevation of Privilege Vulnerability (CNVD-2022-15948)

JetBrains TeamCity is a distributed build management and continuous integration tool from JetBrains Czech Republic. The tool provides continuous unit testing, code quality analysis, and build issue analysis reports.JetBrains TeamCity is vulnerable to a code issue vulnerability that is caused by a Time to Check/Time to Use (TOCTOU) contention condition in the agent registration component. By sending a carefully crafted XML-RPC request, an attacker could exploit this vulnerability to gain elevated privileges.