Lucene search
HistoryMar 28, 2024 - 3:15 p.m.
CVE-2024-31140
jetbrains teamcity
vulnerability
arbitrary file
removal
nvd
4.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N
7 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.0%
In JetBrains TeamCity before 2024.03 server administrators could remove arbitrary files from the server by installing tools
CNA Affected
[
{
"vendor": "JetBrains",
"product": "TeamCity",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "2024.03",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
]
4.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N
7 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
9.0%
Related for CVE-2024-31140