CVE-2023-34228

Summary

In JetBrains TeamCity before 2023.05 authentication checks were missing – 2FA was not checked for some sensitive account actions

Affected Software

VendorProductVersion RangeStatus
JetBrainsTeamCity0 < 2023.05affected

Weaknesses

  • CWE-308: CWE-308

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References