CVE-2025-54538CWE-312

In JetBrains TeamCity before 2025.07 password exposure was possible via command line in the "hg pull" command

Medium · published July 28, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
18.1
In the wild
Unconfirmed
What it is

In JetBrains TeamCity before 2025.07 password exposure was possible via command line in the "hg pull" command

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00269 · 18.1th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2025-07-28T16:20Z
EPSS history
Timeline
  • 28 JUL 16:20Z
    In JetBrains TeamCity before 2025.07 password exposure was possible via command line in the "hg pull" command
    cvelistv5