Jetbrains Teamcity 漏洞

时间轴

去年

版本

2020.2.015
2020.2.115
2020.2.211
2019.1.19
2019.1.08

修正

Official Fix155
Temporary Fix0
Workaround0
Unavailable0
Not Defined4

易受攻击性

High0
Functional0
Proof-of-Concept2
Unproven0
Not Defined157

访问向量

Not Defined0
Physical0
Local3
Adjacent37
Network119

身份验证

Not Defined0
High16
Low90
None53

用户交互

Not Defined0
Required57
None102

C3BM Index

去年

CVSSv3 Base

≤10
≤20
≤33
≤427
≤548
≤650
≤718
≤85
≤97
≤101

CVSSv3 Temp

≤10
≤20
≤33
≤427
≤553
≤649
≤714
≤85
≤97
≤101

VulDB

≤10
≤20
≤310
≤443
≤543
≤635
≤715
≤812
≤90
≤101

NVD

≤10
≤20
≤31
≤40
≤58
≤633
≤724
≤810
≤93
≤108

CNA

≤10
≤20
≤32
≤44
≤535
≤611
≤76
≤82
≤90
≤104

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k40
<2k93
<5k26
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k159
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

去年

🔴 CTI 活动

Affected Versions (56): 9, 9.0.1, 2018.2, 2018.2.1, 2018.2.2, 2018.2.3, 2018.2.4, 2019.0, 2019.1, 2019.1.1, 2019.1.2, 2019.1.3, 2019.1.4, 2019.2, 2019.2.1, 2019.2.2, 2020.1, 2020.1.1, 2020.1.2, 2020.1.3, 2020.1.4, 2020.2, 2020.2.1, 2020.2.2, 2020.2.3, 2021.0, 2021.1, 2021.2, 2022.0, 2022.1, 2022.2, 2022.3, 2022.4, 2022.5, 2022.6, 2022.7, 2022.8, 2022.9, 2022.10, 2022.10.1, 2023.0, 2023.05, 2023.1, 2023.2, 2023.3, 2023.4, 2023.5, 2023.6, 2023.7, 2023.8, 2023.9, 2023.10, 2023.11, 2023.11.1, 2023.11.2, 2023.11.3

已发布BaseTemp漏洞0day今天修正CTICVE
2024-03-285.04.9JetBrains TeamCity Maven Build Steps Detector XML External Entity$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-31139
2024-03-284.04.0JetBrains TeamCity Agent Distribution Settings 跨网站脚本$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-31138
2024-03-285.55.4JetBrains TeamCity Space Connection Configuration 跨网站脚本$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-31137
2024-03-283.93.9JetBrains TeamCity Tools 未知漏洞$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-31140
2024-03-286.56.4JetBrains TeamCity 2FA Remote Code Execution$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-31136
2024-03-285.25.1JetBrains TeamCity Login Page Redirect$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-31135
2024-03-285.45.3JetBrains TeamCity User Registration 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2024-31134
2024-03-214.24.1JetBrains TeamCity Agent Process 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-29880
2024-03-065.55.4JetBrains TeamCity URL 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-28174
2024-03-064.34.2JetBrains TeamCity Build Parameter 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-28173
2024-03-048.58.4JetBrains TeamCity 弱身份验证$0-$5k$0-$5kNot DefinedOfficial Fix0.11CVE-2024-27198
2024-03-047.37.1JetBrains TeamCity 目录遍历$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-27199
2024-02-064.54.5JetBrains TeamCity Agent Distribution 跨网站脚本$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-24937
2024-02-064.64.6JetBrains TeamCity S3 Artifact Storage Plugin Endpoint 权限升级$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2024-24936
2024-02-065.35.2JetBrains TeamCity JAR Archive 目录遍历$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-24942
2024-02-065.35.2JetBrains TeamCity Kotlin DSL Documentation 目录遍历$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2024-24938
2024-02-069.89.6JetBrains TeamCity 弱身份验证$0-$5k$0-$5kNot DefinedOfficial Fix0.04CVE-2024-23917
2023-12-155.85.7JetBrains TeamCity Login 跨网站请求伪造$0-$5k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-50870
2023-09-193.83.7JetBrains TeamCity Configuration 跨网站脚本$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-43566
2023-09-198.58.2JetBrains TeamCity 弱身份验证$0-$5k$0-$5kProof-of-ConceptOfficial Fix0.04CVE-2023-42793
2023-08-252.92.9JetBrains TeamCity User Registration 跨网站脚本$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-41250
2023-08-254.74.7JetBrains TeamCity Build Step Copy 跨网站脚本$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-41249
2023-08-254.04.0JetBrains TeamCity Cloud Profiles Configuration 跨网站脚本$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-41248
2023-07-264.74.7JetBrains TeamCity GitHub Integration 跨网站脚本$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-39175
2023-07-265.45.3JetBrains TeamCity 拒绝服务$0-$5k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-39174

134 更多条目未显示

更多条目由 Jetbrains

Might our Artificial Intelligence support you?

Check our Alexa App!