CVE Vulnerabilities

CVE-2025-31139

Insertion of Sensitive Information into Log File

Published: Mar 27, 2025 | Modified: May 16, 2025

CVSS 3.x

6.5

MEDIUM

Source:

NVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS 2.x

RedHat/V2

RedHat/V3

Ubuntu

Vulnerability-free packages from our partners

Additional information

NVD	https://nvd.nist.gov/vuln/detail/CVE-2025-31139
CWE	https://cwe.mitre.org/data/definitions/532.html

In JetBrains TeamCity before 2025.03 base64 encoded password could be exposed in build log

Weakness

The product writes sensitive information to a log file.

Affected Software

Name	Vendor	Start Version	End Version
Teamcity	Jetbrains	*	2025.03 (excluding)

Potential Mitigations

https://cwe.mitre.org/data/definitions/215.html

References

https://www.jetbrains.com/privacy-security/issues-fixed/

Aqua Container Security