vulnerability

JetBrains TeamCity: CVE-2022-24334: The "Agent push" feature allowed any private key on the server to be selected (TW-73399)

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
Feb 25, 2022
Added
Oct 15, 2024
Modified
Feb 3, 2025

Description

In JetBrains TeamCity before 2021.2.1, the Agent Push feature allowed selection of any private key on the server.

Solution

jetbrains-teamcity-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.