CVE-2023-42793

Known Exploited Public Exploit

Description

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

Link	Tags
https://www.jetbrains.com/privacy-security/issues-fixed/	vendor advisory
https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/	vendor advisory
http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html	third party advisory exploit vdb entry
https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793	third party advisory
https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited-to-hack-servers/	press/media coverage
https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/	third party advisory
https://www.sonarsource.com/blog/teamcity-vulnerability/	exploit third party advisory

What is the severity of CVE-2023-42793?: CVE-2023-42793 has been scored as a critical severity vulnerability.
How to fix CVE-2023-42793?: To fix CVE-2023-42793, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2023-42793 being actively exploited in the wild?: It is confirmed that CVE-2023-42793 is actively exploited. Be extra cautious if you are using vulnerable components. According to its EPSS score, there is a ~95% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2023-42793?: CVE-2023-42793 affects JetBrains TeamCity.