9.1
CVE-2025-26492
- EPSS 0.01%
- Veröffentlicht 11.02.2025 14:15:31
- Zuletzt bearbeitet 16.05.2025 14:51:14
- Quelle cve@jetbrains.com
- CVE-Watchlists
- Unerledigt
In JetBrains TeamCity before 2024.12.2 improper Kubernetes connection settings could expose sensitive resources
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.01% | 0.002 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.1 | 3.9 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
|
| cve@jetbrains.com | 7.7 | 1.3 | 5.8 |
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
|
CWE-522 Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.