1. CVE-Search
  2. CVE-2020-15826
ID CVE-2020-15826
Summary In JetBrains TeamCity before 2020.1, users are able to assign more permissions than they have.
References
Vulnerable Configurations
  • cpe:2.3:a:jetbrains:teamcity:2.0:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2.1:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:3.0:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:3.1:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:4.0:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:4.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:4.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:4.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:4.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:4.5:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:4.5:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:5.0:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:5.1:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:6.0:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:6.5:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:6.5:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:7.0:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:7.1:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:8.0:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:8.1:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:9.0:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:9.0:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:9.1:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:9.1:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:10.0:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:10.0:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:10.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:10.0.1:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:10.0.2:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:10.0.2:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:10.0.3:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:10.0.3:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:10.0.4:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:10.0.4:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:10.0.5:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:10.0.5:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2017.1:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2017.1:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2017.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2017.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2017.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2017.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2017.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2017.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2017.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2017.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2017.1.5:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2017.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2017.2:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2017.2:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2017.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2017.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2017.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2017.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2017.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2017.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2017.2.4:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2017.2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2018.1:-:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2018.1:-:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2018.1:rc:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2018.1:rc:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2018.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2018.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2018.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2018.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2018.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2018.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2018.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2018.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2018.1.5:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2018.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2018.2:-:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2018.2:-:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2018.2:rc:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2018.2:rc:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2018.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2018.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2018.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2018.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2018.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2018.2.3:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2018.2.4:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2018.2.4:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2018.2.5:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2018.2.5:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2019.1:-:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2019.1:-:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2019.1:rc:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2019.1:rc:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2019.1.1:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2019.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2019.1.2:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2019.1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2019.1.3:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2019.1.3:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2019.1.4:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2019.1.4:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2019.1.5:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2019.1.5:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2019.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2019.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2019.2.1:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2019.2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2019.2.2:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2019.2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:jetbrains:teamcity:2019.2.3:*:*:*:*:*:*:*
    cpe:2.3:a:jetbrains:teamcity:2019.2.3:*:*:*:*:*:*:*
CVSS
Base: 4.0 (as of 21-07-2021 - 11:39)
Impact:
Exploitability:
CWE CWE-863
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:L/Au:S/C:N/I:P/A:N
refmap via4
misc
Last major update 21-07-2021 - 11:39
Published 08-08-2020 - 21:15
Last modified 21-07-2021 - 11:39
Back to Top