VYPR
← All advisories
Medium severity6.6NVD Advisory· Published Dec 8, 2022· Updated Jun 17, 2026

CVE-2022-46831

CVE-2022-46831

Description

In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default Credential Provider Chain" allowed TeamCity project administrators to access AWS resources normally limited to TeamCity system administrators.

Affected products

3
  • Jetbrains/Teamcityv53 versions
    2022.10+ 2 more
    • (no CPE)range: 2022.10
    • (no CPE)range: 2022.10 - 2022.10.1
    • cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*range: >=2022.10,<=2022.10.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.