JetBrains TeamCity Improper Access Control Vulnerability Allowing Build Settings Disclosure

A vulnerability in JetBrains TeamCity prior to version 2025.07 allows improper access control, which can lead to the unauthorized disclosure of build settings through snapshot dependencies. This issue could be exploited by users with certain permissions to access sensitive build configuration information that should be restricted.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive build configuration details, potentially leading to further security implications depending on the nature of the disclosed information.

Remediation

Users can upgrade to JetBrains TeamCity version 2025.07 or later to address this vulnerability.