CVE-2022-46831 — JetBrains / TeamCity

CVE-2022-46831

JetBrains / TeamCity PUBLISHED

Description (CNA)

In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default Credential Provider Chain" allowed TeamCity project administrators to access AWS resources normally limited to TeamCity system administrators.

Affected (CNA)

Vendor / product	Versions
JetBrains / TeamCity	affected 2022.10 before 2022.10.1

CWE

CWE-453

References

https://www.jetbrains.com/privacy-security/issues-fixed/

ADP enrichment

CVE

No English description supplied.

https://www.jetbrains.com/privacy-security/issues-fixed/

CISA-ADP

No English description supplied.

No references supplied.