What the vulnerability does
01Description
In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logs
CVSS base score
4.3/10
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Key dates
02Disclosure timeline
April 25, 2025
CVE published
April 25, 2025
Record updated
External resources
03References
Related vulnerabilities
04Related CVE
CVE-2025-13743 Expired Personal Access Tokens (PATs) are recorded in Docker Desktop diagnostic logs
CVE-2024-55891 Information Disclosure via Exception Handling/Logger in TYPO3
CVE-2025-23289
CVE-2026-24762 RustFS Logs Sensitive Credentials in Plaintext
CVE-2021-41808 In M-Files Server product with versions before 21.11.10775.0, enabling logging of federated authentication would write sensitive information to event logs.
