CVE-2025-24460CWE-863

In JetBrains TeamCity before 2024.12.1 improper access control allowed to see Projects’ names in the agent pool

Medium · published January 21, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
18.2
In the wild
Unconfirmed
What it is

In JetBrains TeamCity before 2024.12.1 improper access control allowed to see Projects’ names in the agent pool

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00270 · 18.2th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2025-01-21T17:23Z
EPSS history
Timeline
  • 21 JAN 17:23Z
    In JetBrains TeamCity before 2024.12.1 improper access control allowed to see Projects’ names in the agent pool
    cvelistv5