9.8Crítica
KEV
Usada en ransomware
CVE-2023-42793JetBrains TeamCity Authentication Bypass Vulnerability
Explotación conocida — JetBrains TeamCity Authentication Bypass Vulnerability
CISA confirmó el 04.10.2023 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 25.10.2023.
Acción requerida: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. https://blog.jetbrains.com/teamcity/2023/09/critical-security-issue-affecting-teamcity-on-premises-update-to-2023-05-4-now/ ; https://nvd.nist.gov/vuln/detail/CVE-2023-42793
Descripción
In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
Referencias y parches
- https://www.jetbrains.com/privacy-security/issues-fixed/ Vendor Advisory
- https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/ Vendor Advisory
- http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html ExploitThird Party AdvisoryVDB Entry
- https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793 Third Party Advisory
- https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited-to-hack-servers/ Press/Media Coverage
- https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-te… Broken LinkThird Party Advisory
- https://www.sonarsource.com/blog/teamcity-vulnerability/ ExploitThird Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-42793 US Government Resource
Coincidencias CPE (NVD) (1)
cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*< 2023.05.4