Incorrect Default Permissions

CVE-2024-43114

High

7.5/10

Summary

In JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory permissions

Attack Complexity: HIGH
Attack Vector: LOCAL
Integrity Impact: HIGH
Scope: CHANGED
User Interaction: NONE
Privileges Required: LOW
Confidentiality Impact: HIGH
Availability Impact: NONE

CWE-276 - Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References

Advisory Timeline

Published Aug 06, 2024