CVE-2023-42793

CVE-2023-42793

NVD Published Date: September 19, 2023 at 05:15 PM

NVD Last Modified: October 03, 2023 at 03:44 PM

Download Patch

Vulnerability ID

CVE-2023-42793

Severity

CRITICAL

Severity Score

9.8

Summary

In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

References

https://www.jetbrains.com/privacy-security/issues-fixed/

https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/

http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html

https://www.securityweek.com/recently-patched-teamcity-vulnerability-exploited-to-hack-servers/

https://attackerkb.com/topics/1XEEEkGHzt/cve-2023-42793

https://www.rapid7.com/blog/post/2023/09/25/etr-cve-2023-42793-critical-authentication-bypass-in-jetbrains-teamcity-ci-cd-servers/

Mitigation and Patches

-

Exploits

https://www.exploit-db.com/exploits/51884

https://github.com/H454NSec/CVE-2023-42793

https://github.com/Zenmovie/CVE-2023-42793

https://github.com/Zyad-Elsayed/CVE-2023-42793

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jetbrains_teamcity_rce_cve_2023_42793.rb

https://github.com/H454NSec/CVE-2023-42793

http://packetstormsecurity.com/files/174860/JetBrains-TeamCity-Unauthenticated-Remote-Code-Execution.html

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

https://github.com/Zenmovie/CVE-2023-42793

https://github.com/Zyad-Elsayed/CVE-2023-42793

Metasploit Payload

-

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE ID

CWE-288

Recent Publish

CVE-2023-22515

CVE-2023-34048

CVE-2023-43208

CVE-2023-46747

CVE-2024-28986

2024-08 Cumulative Update for Windows 10 Version 1809 for x86-based Systems (KB5041578)

See SecOps Solution
in action

Schedule Demo

Agentless security for your infrastructure and applications - to build faster, more securely and in a fraction of the operational cost of other solutions