// For flags

CVE-2023-42793

JetBrains TeamCity Authentication Bypass Vulnerability

Severity Score

9.8
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

10
*Multiple Sources

Exploited in Wild

Yes
*KEV

Decision

-
*SSVC
Descriptions

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

En JetBrains TeamCity antes de la versión 2023.05.4, era posible omitir la autenticación que conducía a RCE en TeamCity Server

JetBrains TeamCity version 2023.05.3 suffers from a remote code execution vulnerability.

JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execution on TeamCity Server.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2023-09-14 CVE Reserved
  • 2023-09-19 CVE Published
  • 2023-09-19 First Exploit
  • 2023-10-04 Exploited in Wild
  • 2023-10-25 KEV Due Date
  • 2024-08-02 CVE Updated
  • 2024-09-14 EPSS Updated
CWE
  • CWE-288: Authentication Bypass Using an Alternate Path or Channel
CAPEC
References (17)
URL Tag Source
https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793 Technical Description
https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers Third Party Advisory
https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited-to-hack-servers Media Coverage
https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793/rapid7-analysis
https://blog.jetbrains.com/teamcity/2023/09/critical-security-issue-affecting-teamcity-on-premises-update-to-2023-05-4-now
URL Date SRC
https://www.exploit-db.com/exploits/51884 2024-03-14
https://github.com/H454NSec/CVE-2023-42793 2024-05-22
https://github.com/Zyad-Elsayed/CVE-2023-42793 2024-04-24
https://github.com/junnythemarksman/CVE-2023-42793 2024-05-27
https://github.com/Zenmovie/CVE-2023-42793 2023-10-11
https://github.com/hotplugin0x01/CVE-2023-42793 2024-05-06
https://github.com/HusenjanDev/CVE-2023-42793 2024-07-05
https://github.com/FlojBoj/CVE-2023-42793 2024-08-25
http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html 2024-08-02
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/jetbrains_teamcity_rce_cve_2023_42793.rb 2023-09-19
URL Date SRC
URL Date SRC
https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem 2023-10-03
https://www.jetbrains.com/privacy-security/issues-fixed 2023-10-03
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Jetbrains
Search vendor "Jetbrains"
 Teamcity
Search vendor "Jetbrains" for product "Teamcity"
 < 2023.05.4
Search vendor "Jetbrains" for product "Teamcity" and version " < 2023.05.4"
-
Affected