CVE-2025-54538

MEDIUM

Jetbrains Teamcity < 2025.07 - Cleartext Storage

Title source: rule
STIX 2.1

Description

In JetBrains TeamCity before 2025.07 password exposure was possible via command line in the "hg pull" command

References (1)

Scores

CVSS v3 5.5
EPSS 0.0000
EPSS Percentile 0.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-312
Status published
Products (1)
jetbrains/teamcity < 2025.07
Published Jul 28, 2025
Tracked Since Feb 18, 2026