VULNERABILITY INTELLIGENCE

CVE-2022-46831

CVSS score6.6 MEDIUM
EPSS probability0.48%
CISA KEVNot currently listed
Published2022-12-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

Description

In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default Credential Provider Chain" allowed TeamCity project administrators to access AWS resources normally limited to TeamCity system administrators.

Weakness classification

  • cve@jetbrains.com: CWE-453
  • nvd@nist.gov: CWE-1188

Primary references