In JetBrains TeamCity before 2025.07 password exposure was possible via command line in the hg pull command
Weakness
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Teamcity | Jetbrains | * | 2025.07 (excluding) |