UpHeron
All vulnerabilities

Servers and applications

CVE-2022-46831

In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default Credential Provider Chain" allowed TeamCity project administrators to access AWS resources normally limited to TeamCity system administrators.

Severity
Medium 4.9
Published
8 Dec 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
TeamCityServers and applications · cpe:a:jetbrains:teamcity
  • From 2022.10 up to 2022.10.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-46831
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-46831