JetBrains TeamCity Authentication Bypass (CVE-2023-42793)

What is the Attack?
Multiple cyberthreat actors seen exploiting the authentication bypass flaw in JetBrains TeamCity that could lead to remote code execution. If compromised, access to a TeamCity server would provide malicious actors with access to the software developer's source code, signing certificates, and the ability to manipulate software compilation and deployment processes. The malicious actors could further use to conduct supply chain operations.

What is the Vendor Solution?

JetBrains released patch on September 18, 2023 to fix the …

access attack authentication authentication bypass authentication bypass flaw bypass certificates code code execution compromised cve cyberthreat deployment developer exploiting flaw jetbrains jetbrains teamcity malicious malicious actors processes remote code remote code execution server signing software software developer source code teamcity what is