JetBrains TeamCity Access Control Error Vulnerability (CNVD-2022-18624)

JetBrains TeamCity is a distributed build management and continuous integration tool from JetBrains (Jetbrains). An access control error vulnerability exists in JetBrains TeamCity, which stems from the fact that the product does not effectively restrict permissions for the Agent Push feature. An attacker could obtain any private key on the server through this vulnerability.