The generated Kotlin DSL settings allowed usage of an unencrypted connection for resolving artifacts. The issue was fixed in JetBrains TeamCity 2018.2.3.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Link | Tags |
---|---|
https://blog.jetbrains.com/blog/2019/06/19/jetbrains-security-bulletin-q1-2019/ | vendor advisory |