CVE-2024-56351

Summary

In JetBrains TeamCity before 2024.12 access tokens were not revoked after removing user roles

Affected Software

VendorProductVersion RangeStatus
JetBrainsTeamCity0 < 2024.12affected

Weaknesses

  • CWE-613: CWE-613

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References