CVE-2024-24942 - Vulnerability Details - OpenCVE

In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Jetbrains	Teamcity

Configuration 1 [-]

cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.jetbrains.com/privacy-security/issues-fixed/

History

No history.

MITRE

Status: PUBLISHED

Assigner: JetBrains

Published: 2024-02-06T09:21:31.426Z

Updated: 2024-08-01T23:36:21.219Z

Reserved: 2024-02-01T15:54:48.171Z

Link: CVE-2024-24942

Vulnrichment

Updated: 2024-08-01T23:36:21.219Z

NVD

Status : Modified

Published: 2024-02-06T10:15:11.590

Modified: 2024-11-21T09:00:01.683

Link: CVE-2024-24942

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-24942", "assignerOrgId": "547ada31-17d8-4964-bc5f-1b8238ba8014", "state": "PUBLISHED", "assignerShortName": "JetBrains", "dateReserved": "2024-02-01T15:54:48.171Z", "datePublished": "2024-02-06T09:21:31.426Z", "dateUpdated": "2024-08-01T23:36:21.219Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "547ada31-17d8-4964-bc5f-1b8238ba8014", "shortName": "JetBrains", "dateUpdated": "2024-02-06T09:21:31.426Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-23", "cweId": "CWE-23"}]}], "affected": [{"vendor": "JetBrains", "product": "TeamCity", "versions": [{"version": "0", "status": "affected", "lessThan": "2023.11.3", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives"}], "references": [{"url": "https://www.jetbrains.com/privacy-security/issues-fixed/"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}}]}, "adp": [{"affected": [{"vendor": "jetbrains", "product": "teamcity", "cpes": ["cpe:2.3:a:jetbrains:teamcity:-:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "0", "status": "affected", "lessThan": "2023.11.3", "versionType": "semver"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-07-15T20:40:38.185684Z", "id": "CVE-2024-24942", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-17T14:53:19.875Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T23:36:21.219Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.jetbrains.com/privacy-security/issues-fixed/", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.jetbrains.com/privacy-security/issues-fixed/", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T23:36:21.219Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-24942", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-07-15T20:40:38.185684Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:jetbrains:teamcity:-:*:*:*:*:*:*:*"], "vendor": "jetbrains", "product": "teamcity", "versions": [{"status": "affected", "version": "0", "lessThan": "2023.11.3", "versionType": "semver"}], "defaultStatus": "unaffected"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-15T20:50:18.073Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "JetBrains", "product": "TeamCity", "versions": [{"status": "affected", "version": "0", "lessThan": "2023.11.3", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.jetbrains.com/privacy-security/issues-fixed/"}], "descriptions": [{"lang": "en", "value": "In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives"}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-23", "description": "CWE-23"}]}], "providerMetadata": {"orgId": "547ada31-17d8-4964-bc5f-1b8238ba8014", "shortName": "JetBrains", "dateUpdated": "2024-02-06T09:21:31.426Z"}}}, "cveMetadata": {"cveId": "CVE-2024-24942", "state": "PUBLISHED", "dateUpdated": "2024-08-01T23:36:21.219Z", "dateReserved": "2024-02-01T15:54:48.171Z", "assignerOrgId": "547ada31-17d8-4964-bc5f-1b8238ba8014", "datePublished": "2024-02-06T09:21:31.426Z", "assignerShortName": "JetBrains"}, "dataVersion": "5.1"}