CVE-2025-26492

NVD	https://nvd.nist.gov/vuln/detail/CVE-2025-26492
CWE	https://cwe.mitre.org/data/definitions/522.html

In JetBrains TeamCity before 2024.12.2 improper Kubernetes connection settings could expose sensitive resources

Weakness

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Potential Mitigations

https://cwe.mitre.org/data/definitions/102.html
https://cwe.mitre.org/data/definitions/474.html
https://cwe.mitre.org/data/definitions/50.html
https://cwe.mitre.org/data/definitions/509.html
https://cwe.mitre.org/data/definitions/551.html
https://cwe.mitre.org/data/definitions/555.html
https://cwe.mitre.org/data/definitions/560.html
https://cwe.mitre.org/data/definitions/561.html
https://cwe.mitre.org/data/definitions/600.html
https://cwe.mitre.org/data/definitions/644.html
https://cwe.mitre.org/data/definitions/645.html
https://cwe.mitre.org/data/definitions/652.html
https://cwe.mitre.org/data/definitions/653.html

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Insufficiently Protected Credentials

Weakness

Potential Mitigations

Related Attack Patterns

References