In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 authentication bypass was possible in specific edge cases
Weakness
The product requires authentication, but the product has an alternate path or channel that does not require authentication.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Teamcity | Jetbrains | * | 2022.04.7 (excluding) |
| Teamcity | Jetbrains | 2022.10 (including) | 2022.10.6 (excluding) |
| Teamcity | Jetbrains | 2023.05 (including) | 2023.05.6 (excluding) |
| Teamcity | Jetbrains | 2023.11 (including) | 2023.11.5 (excluding) |