CVE-2024-56354

CVSS 3.1 Score 4.9 of 10 (medium)

Details

Published Dec 20, 2024

Updated: Jan 2, 2025

CWE ID 522

Summary

CVE-2024-56354 is a cybersecurity vulnerability affecting JetBrains TeamCity versions prior to 2024.12. This issue grants users with view settings permission access to password field values, compromising the security of protected information within the TeamCity environment. This weakness could lead to unauthorized access, data breaches, or other malicious activities. TeamCity urges users to upgrade to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

TeamCity

Affected Vendors

JetBrains

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/1xo-NL
https://www.cve.org/CVERecord?id=CVE-2024-56354
https://nvd.nist.gov/vuln/detail/CVE-2024-56354

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

DRAT V2: Updated DRAT Emerges in TAG-140’s Arsenal

Threats to the 2025 NATO Summit

Artificial Eyes: Generative AI in China’s Military Intelligence

Know What Matters

For Customers

For Partners