Teamcity Security Vulnerabilities and Issues — Teamcity CVE List

Lucene search

JetbrainsTeamcity

12 matches found

CVE•added 2019/10/01 8:15 p.m.•107 views

CVE-2019-15035

An issue was discovered in JetBrains TeamCity 2018.2.4. A TeamCity Project administrator could get access to potentially confidential server-level data. The issue was fixed in TeamCity 2018.2.5 and 2019.1.

4.9CVSS5AI score0.00004EPSS

CVE•added 2019/10/01 2:15 p.m.•103 views

CVE-2019-15039

An issue was discovered in JetBrains TeamCity 2018.2.4. It had a possible remote code execution issue. This was fixed in TeamCity 2019.1.

9.8CVSS9.6AI score0.0035EPSS

CVE•added 2019/10/01 5:15 p.m.•90 views

CVE-2019-15042

An issue was discovered in JetBrains TeamCity 2018.2.4. It had no SSL certificate validation for some external https connections. This was fixed in TeamCity 2019.1.

7.5CVSS7.5AI score0.00002EPSS

CVE•added 2019/10/01 4:15 p.m.•77 views

CVE-2019-15038

An issue was discovered in JetBrains TeamCity 2018.2.4. The TeamCity server was not using some security-related HTTP headers. The issue was fixed in TeamCity 2019.1.

7.5CVSS7.5AI score0.00003EPSS

CVE•added 2019/10/02 7:15 p.m.•57 views

CVE-2019-12157

In JetBrains UpSource versions before 2018.2 build 1293, there is credential disclosure via RPC commands.

10CVSS9.2AI score0.00004EPSS

CVE•added 2019/10/31 3:15 p.m.•49 views

CVE-2019-18364

In JetBrains TeamCity before 2019.1.4, insecure Java Deserialization could potentially allow remote code execution.

9.8CVSS9.7AI score0.00048EPSS

CVE•added 2019/10/31 3:15 p.m.•45 views

CVE-2019-18363

In JetBrains TeamCity before 2019.1.2, access could be gained to the history of builds of a deleted build configuration under some circumstances.

5.3CVSS5.2AI score0.00003EPSS

CVE•added 2019/10/02 7:15 p.m.•44 views

CVE-2019-15036

An issue was discovered in JetBrains TeamCity 2018.2.4. A TeamCity Project administrator could execute any command on the server machine. The issue was fixed in TeamCity 2018.2.5 and 2019.1.

9CVSS7.1AI score0.00007EPSS

CVE•added 2019/10/31 4:15 p.m.•44 views

CVE-2019-18365

In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages.

4.3CVSS4.7AI score0.00003EPSS

CVE•added 2019/10/31 4:15 p.m.•44 views

CVE-2019-18367

In JetBrains TeamCity before 2019.1.2, a non-destructive operation could be performed by a user without the corresponding permissions.

5.3CVSS5.2AI score0.00002EPSS

CVE•added 2019/10/31 4:15 p.m.•41 views

CVE-2019-18366

In JetBrains TeamCity before 2019.1.2, secure values could be exposed to users with the "View build runtime parameters and data" permission.

5.3CVSS5.2AI score0.00003EPSS

CVE•added 2019/10/02 7:15 p.m.•32 views

CVE-2019-15037

An issue was discovered in JetBrains TeamCity 2018.2.4. It had several XSS vulnerabilities on the settings pages. The issues were fixed in TeamCity 2019.1.

6.1CVSS6.1AI score0.00006EPSS