CVE-2022-29928 MEDIUM

CVE-2022-29928

Vendor Jetbrains

Product TeamCity

Weakness CWE-532 · Sensitive info in logs

Published May 12, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

4.4/10

Attack vector Network

Attack complexity High

Privileges required High

User interaction None

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

In JetBrains TeamCity before 2022.04 leak of secrets in TeamCity agent logs was possible

Key dates

02Disclosure timeline

May 12, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-29928 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/532.html

Related vulnerabilities

04Related CVE

CVE-2024-29959 Brocade Fabric OS switch encrypted passwords in the Brocade SANnav Standby node's support save CVE-2024-3744 Kubernetes azure-file-csi-driver in versions before 1.29.4 and 1.30.1 discloses service account tokens in logs CVE-2025-24556 WordPress MooWoodle plugin <= 3.2.4 - Sensitive Data Exposure vulnerability CVE-2024-35196 Slack integration leaks sensitive information in logs in Sentry CVE-2022-0021 GlobalProtect App: Information Exposure Vulnerability When Using Connect Before Logon