exploitDog

CVE-2022-24335

Опубликовано: 25 фев. 2022

Источник: nvd

CVSS3: 8.1

CVSS2: 6.8

EPSS Низкий

Описание

JetBrains TeamCity before 2021.2 was vulnerable to a Time-of-check/Time-of-use (TOCTOU) race-condition attack in agent registration via XML-RPC.

Ссылки

https://blog.jetbrains.com
Vendor Advisory
https://blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021/
Vendor Advisory
https://blog.jetbrains.com
Vendor Advisory
https://blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*

Версия до 2021.2.1 (исключая)

EPSS

Процентиль: 0%

0.00004

Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-367

Связанные уязвимости

GHSA-34vj-56xp-f55r

github

почти 4 года назад

JetBrains TeamCity before 2021.2 was vulnerable to a Time-of-check/Time-of-use (TOCTOU) race-condition attack in agent registration via XML-RPC.

EPSS

Процентиль: 0%

0.00004

Низкий

8.1 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-367