PT-2025-5366

CVE-2025-24460

·

Published

2025-01-21

·

Updated

2025-01-30

Description by

CVSS 3.1
4.3
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2024.12.1
Description The issue is related to improper access control, allowing unauthorized viewing of project names in the agent pool. This could potentially allow a remote attacker to gain access to confidential information.
Recommendations For JetBrains TeamCity versions prior to 2024.12.1, update to version 2024.12.1 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-863: Incorrect Authorization
Related identifiers
CVE-2025-24460
BDU:2025-01195
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com