Lucene search

K
nvd[email protected]NVD:CVE-2022-40979
HistorySep 23, 2022 - 11:15 a.m.

CVE-2022-40979

2022-09-2311:15:09
CWE-532
web.nvd.nist.gov
1
jetbrains teamcity
perforce
logging
environmental variables
password

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.001 Low

EPSS

Percentile

31.3%

In JetBrains TeamCity before 2022.04.4 environmental variables of “password” type could be logged when using custom Perforce executable

Affected configurations

NVD
Node
jetbrainsteamcityRange<2022.04.4

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

0.001 Low

EPSS

Percentile

31.3%

Related for NVD:CVE-2022-40979