Unauthorized Access to Project Parameter Values in JetBrains TeamCity

Unauthorized Access to Project Parameter Values in JetBrains TeamCity

CVE-2020-15828 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

In JetBrains TeamCity before 2020.1.1, project parameter values can be retrieved by a user without appropriate permissions.

Learn more about our User Device Pen Test.