Multiple vulnerabilities in JetBrains TeamCity



Risk Medium
Patch available YES
Number of vulnerabilities 2
CVE-ID CVE-2022-36322
CVE-2022-36321
CWE-ID CWE-88
CWE-200
Exploitation vector Network
Public exploit N/A
Vulnerable software
 TeamCity
Web applications / CRM systems

Vendor JetBrains s.r.o.

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Improper Neutralization of Argument Delimiters in a Command

EUVDB-ID: #VU65784

Risk: Medium

CVSSv4.0: 6.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-36322

CWE-ID: CWE-88 - Argument Injection or Modification

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a build parameter injection flaw. A remote user can send a specially crafted request and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

TeamCity: before 2022.04.2

CPE2.3 External links

https://www.jetbrains.com/privacy-security/issues-fixed/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Information disclosure

EUVDB-ID: #VU65786

Risk: Low

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-36321

CWE-ID: CWE-200 - Information exposure

Exploit availability: No

Description

The vulnerability allows a remote user to gain access to potentially sensitive information.

The vulnerability exists due to storing sensitive information into log. A remote administrator can gain unauthorized access to sensitive information on the system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

TeamCity: before 2022.04.2

CPE2.3 External links

https://www.jetbrains.com/privacy-security/issues-fixed/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###