First published: Thu Nov 03 2022(Updated: )
In JetBrains TeamCity version before 2022.10, Password parameters could be exposed in the build log if they contained special characters
Credit: security@jetbrains.com
Affected Software | Affected Version | How to fix |
---|---|---|
Jetbrains Teamcity | <2022.10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for JetBrains TeamCity is CVE-2022-44624.
The severity of CVE-2022-44624 is high with a severity value of 7.5.
In JetBrains TeamCity before version 2022.10, password parameters can be exposed in the build log if they contain special characters.
The affected software version of JetBrains TeamCity in CVE-2022-44624 is before version 2022.10.
Yes, the fix for CVE-2022-44624 is available in JetBrains TeamCity version 2022.10 or later.