JetBrains TeamCity Connection Secrets Decryption Vulnerability

A vulnerability in JetBrains TeamCity versions prior to 2024.12.1 allows for the decryption of connection secrets through the Test Connection endpoint, without the necessary permissions. This issue could lead to unauthorized access to sensitive information.

Impact

Exploitation of this vulnerability could result in unauthorized decryption of connection secrets, potentially leading to exposure of sensitive information or credentials.

Remediation

Users can update to JetBrains TeamCity version 2024.12.1 or later to address this vulnerability.