CVE Catalog
CVE-2023-34228
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.40%
32th percentile - higher than 32% of all known CVEs
Summary
In JetBrains TeamCity versions before 2023.05, authentication checks were missing – 2FA was not checked for some sensitive account actions.
Risk Assessment
The lack of 2FA verification may lead to unauthorized access to sensitive account functions, increasing the risk of security breaches.
Recommendation
It is recommended to upgrade to version 2023.05 or later to ensure proper 2FA verification for all sensitive actions.
Original NVD description (English source)
In JetBrains TeamCity before 2023.05 authentication checks were missing – 2FA was not checked for some sensitive account actions