CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2020-7908
https://notcve.org/view.php?id=CVE-2020-7908
In JetBrains TeamCity before 2019.1.5, reverse tabnabbing was possible on several pages. En JetBrains TeamCity versiones anteriores a 2019.1.5, un ataque de tabnabbing inverso era posible en varias páginas. • https://blog.jetbrains.com https://blog.jetbrains.com/blog/2020/01/24/jetbrains-security-bulletin-q4-2019 • CWE-269: Improper Privilege Management •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2019-18367
https://notcve.org/view.php?id=CVE-2019-18367
In JetBrains TeamCity before 2019.1.2, a non-destructive operation could be performed by a user without the corresponding permissions. En JetBrains TeamCity versiones anteriores a 2019.1.2, una operación no destructiva podría ser realizada por parte de un usuario sin los permisos correspondientes. • https://blog.jetbrains.com/blog/2019/10/29/jetbrains-security-bulletin-q3-2019 • CWE-276: Incorrect Default Permissions •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2019-18366
https://notcve.org/view.php?id=CVE-2019-18366
In JetBrains TeamCity before 2019.1.2, secure values could be exposed to users with the "View build runtime parameters and data" permission. En JetBrains TeamCity versiones anteriores a 2019.1.2, valores seguros podrían estar expuestos a usuarios con el permiso "View build runtime parameters and data". • https://blog.jetbrains.com/blog/2019/10/29/jetbrains-security-bulletin-q3-2019 • CWE-276: Incorrect Default Permissions •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2019-18365
https://notcve.org/view.php?id=CVE-2019-18365
In JetBrains TeamCity before 2019.1.4, reverse tabnabbing was possible on several pages. En JetBrains TeamCity versiones anteriores a 2019.1.4, un tabnabbing inverso era posible en varias páginas. • https://blog.jetbrains.com/blog/2019/10/29/jetbrains-security-bulletin-q3-2019 • CWE-269: Improper Privilege Management •
CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 0CVE-2019-18364
https://notcve.org/view.php?id=CVE-2019-18364
In JetBrains TeamCity before 2019.1.4, insecure Java Deserialization could potentially allow remote code execution. En JetBrains TeamCity versiones anteriores a 2019.1.4, una Deserialización de Java no segura podría permitir una ejecución de código remota. • https://blog.jetbrains.com/blog/2019/10/29/jetbrains-security-bulletin-q3-2019 • CWE-502: Deserialization of Untrusted Data •