Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In JetBrains TeamCity before 2021.2.1, the Agent Push feature allowed selection of any private key on the server.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
JetBrains TeamCity 访问控制错误漏洞
Vulnerability Description
JetBrains TeamCity是捷克JetBrains公司的一套分布式构建管理和持续集成工具。该工具提供持续单元测试、代码质量分析和构建问题分析报告等功能。 JetBrains TeamCity 中存在访问控制错误漏洞,该漏洞源于产品未对Agent Push功能的权限进行有效限制。攻击者可通过该漏洞获得服务器上的任何私钥。以下产品及版本受到影响:JetBrains TeamCity 2021.2.1 之前版本。
CVSS Information
N/A
Vulnerability Type
N/A