CVE-2023-42793 - OpenCVE

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Jetbrains	Teamcity

Configuration 1 [-]

cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*

References

Link	Resource
http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html	Exploit VDB Entry
https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793	Technical Description Third Party Advisory
https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/	Vendor Advisory
https://www.jetbrains.com/privacy-security/issues-fixed/	Vendor Advisory
https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/	Third Party Advisory
https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited-to-hack-servers/	Press/Media Coverage

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: JetBrains

Published: 2023-09-19T16:57:29.245Z

Updated: 2023-09-19T16:57:29.245Z

Reserved: 2023-09-14T09:48:47.154Z

Link: CVE-2023-42793

JSON object: View

NVD Information

Status : Analyzed

Published: 2023-09-19T17:15:08.330

Modified: 2023-10-03T15:44:06.660

Link: CVE-2023-42793

JSON object: View

Redhat Information

No data.

CWE

CWE-288

{"cisaActionDue": "2023-10-25", "cisaExploitAdd": "2023-10-04", "cisaRequiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.", "cisaVulnerabilityName": "JetBrains TeamCity Authentication Bypass Vulnerability", "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*", "matchCriteriaId": "6728FE9D-39E3-4F30-9301-5D5E07AD9CBC", "versionEndExcluding": "2023.05.4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible"}, {"lang": "es", "value": "En JetBrains TeamCity antes de la versi\u00f3n 2023.05.4, era posible omitir la autenticaci\u00f3n que conduc\u00eda a RCE en TeamCity Server"}], "id": "CVE-2023-42793", "lastModified": "2023-10-03T15:44:06.660", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "cve@jetbrains.com", "type": "Secondary"}]}, "published": "2023-09-19T17:15:08.330", "references": [{"source": "cve@jetbrains.com", "tags": ["Exploit", "VDB Entry"], "url": "http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html"}, {"source": "cve@jetbrains.com", "tags": ["Technical Description", "Third Party Advisory"], "url": "https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793"}, {"source": "cve@jetbrains.com", "tags": ["Vendor Advisory"], "url": "https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/"}, {"source": "cve@jetbrains.com", "tags": ["Vendor Advisory"], "url": "https://www.jetbrains.com/privacy-security/issues-fixed/"}, {"source": "cve@jetbrains.com", "tags": ["Third Party Advisory"], "url": "https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/"}, {"source": "cve@jetbrains.com", "tags": ["Press/Media Coverage"], "url": "https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited-to-hack-servers/"}], "sourceIdentifier": "cve@jetbrains.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-288"}], "source": "cve@jetbrains.com", "type": "Primary"}]}