Lucene search
HistoryJul 01, 2024 - 5:15 p.m.
CVE-2024-39878
jetbrains teamcity
private key exposure
github app connection
security vulnerability
4.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N
4.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.2%
In JetBrains TeamCity before 2024.03.3 private key could be exposed via testing GitHub App Connection
CNA Affected
[
{
"vendor": "JetBrains",
"product": "TeamCity",
"versions": [
{
"version": "0",
"status": "affected",
"lessThan": "2024.03.3",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
]Related
nvd
nvd
CVE-2024-39878
2024-07-01 17:15:09
vulnrichment
vulnrichment
CVE-2024-39878
2024-07-01 17:07:45
cvelist
cvelist
CVE-2024-39878
2024-07-01 17:07:45
4.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N
4.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.2%
Related for CVE-2024-39878