CVE-2022-40979CWE-532

In JetBrains TeamCity before 2022.04.4 environmental variables of "password" type could be logged when using custom Perforce executable

Medium · published September 23, 2022

CVSS v3.1
4.4
EPSS
0%
Percentile
29.7
In the wild
Unconfirmed
What it is

In JetBrains TeamCity before 2022.04.4 environmental variables of "password" type could be logged when using custom Perforce executable

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00370 · 29.7th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2022-09-23T10:50Z
EPSS history
Timeline
  • 23 SEP 10:50Z
    In JetBrains TeamCity before 2022.04.4 environmental variables of "password" type could be logged when using custom Perforce executable
    cvelistv5