PT-2019-12665
CVE-2019-12156
·
Published
2019-10-02
·
Updated
2021-11-04
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
JetBrains TeamCity versions prior to 2018.2.5
JetBrains UpSource versions prior to 2018.2 build 1293
Description
The issue allows server metadata to be exposed due to an error message that reflects the whole response back to the client.
Recommendations
For JetBrains TeamCity versions prior to 2018.2.5, update to version 2018.2.5 or later.
For JetBrains UpSource versions prior to 2018.2 build 1293, update to version 2018.2 build 1293 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾