Skip to main content

Exposed Dangerous Method or Function

CVE-2024-29880

Medium
4.2/10

Summary

In JetBrains TeamCity before 2023.11 users with access to the agent machine might obtain permissions of the user running the agent process

  • LOW
  • LOCAL
  • LOW
  • UNCHANGED
  • NONE
  • HIGH
  • LOW
  • LOW

CWE-749 - Exposed Dangerous Method or Function

The software provides an Applications Programming Interface (API) or similar interface for interaction with external actors, but the interface includes a dangerous method or function that is not properly restricted.

References

Advisory Timeline

  • Published