CVE-2022-46831

MEDIUM

JetBrains TeamCity <2022.10.1 - Privilege Escalation

Title source: llm

Description

In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default Credential Provider Chain" allowed TeamCity project administrators to access AWS resources normally limited to TeamCity system administrators.

References (1)

Core 1

Core References

Vendor Advisory

https://www.jetbrains.com/privacy-security/issues-fixed/

Scores

CVSS v3 6.6

EPSS 0.0045

EPSS Percentile 36.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-1188 CWE-453

Status published

Products (1)

jetbrains/teamcity 2022.10 - 2022.10.1

Published Dec 08, 2022

Tracked Since Feb 18, 2026