3 ms·
CVE-2023-42793 Vulnerability in TeamCity: Post-Mortem
- politelemon 3y agoThe sonar blog post on the exploit explains it well. https://www.sonarsource.com/blog/teamcity-vulnerability/ https://www.sonarsource.com/blog/teamcity-vulnerability/ The middleware was not checking paths if they ended with /rpc2, and incidentally there was an endpoint to create named tokens for any user. So they created tokens named rpc2, which is an indicator of compromise.
- cjbprime 3y agoIt's odd to call this a post-mortem without discussing anything about the circumstances of the creation, what their root cause was, and how that will be avoided in future.