Vulnerabilities > CVE-2025-24461 - Missing Authorization vulnerability in Jetbrains Teamcity 2024.12.1

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
jetbrains
CWE-862

Summary

In JetBrains TeamCity before 2024.12.1 decryption of connection secrets without proper permissions was possible via Test Connection endpoint

Vulnerable Configurations

Part Description Count
Application
Jetbrains
1

Common Weakness Enumeration (CWE)