CVE-2022-44646 : In JetBrains TeamCity version before 2022.10, no audit items were added upon edi

In JetBrains TeamCity version before 2022.10, no audit items were added upon editing a user's settings

Published 2022-11-03 14:15:36

Updated 2022-11-03 18:03:56

Source JetBrains s.r.o.

View at NVD, CVE.org

Products affected by CVE-2022-44646

Jetbrains » Teamcity
Versions before (<) 2022.10
cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.07%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 31 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N	3.9	1.4	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: Low Availability: None
2.2	LOW	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N	0.7	1.4	JetBrains s.r.o.
Attack Vector: Network Attack Complexity: High Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: None Integrity: Low Availability: None

CWE-223 Omission of Security-relevant Information

The product does not record or display information that would be important for identifying the source or nature of an attack, or determining if an action is safe.

Assigned by: security@jetbrains.com (Secondary)

Jump to