![]() On September 18, 2023, we released version 2023.05.4 that contained a fix for the issue. We then proceeded with handling the issue. Please refer to the Sonar blog post for technical details about how the issue can be reproduced. We confirmed it to be a major security issue and stated that we had reproduced the issue and prepared a fix for it. On September 14, 2023, we reported back to Sonar. We confirmed receiving the report on the same day and proceeded with the internal investigation. If abused, the flaw could enable an unauthenticated attacker with HTTP(S) access to a TeamCity server to perform a remote code execution (RCE) attack and gain administrative control of the TeamCity server. ![]() On September 6, 2023, we received a report from Sonar regarding a critical vulnerability issue identified in TeamCity On-Premises.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |