CVE-2020-11686: 
JetBrains TeamCity vulnerability analysis and mitigation

CVE-2020-11686 affects JetBrains TeamCity versions before 2019.1.4. The vulnerability was disclosed on April 22, 2020, and allows project administrators to retrieve certain TeamCity server settings that they should not have access to (JetBrains Blog).

This is a low severity vulnerability with a CVSS v3 Base Score of 2.7. The vulnerability requires high privileges and network access, with no user interaction needed. The attack vector is network-based, with low attack complexity. The vulnerability only impacts confidentiality at a low level, with no impact on integrity or availability (AttackerKB).

The vulnerability allows project administrators to access certain TeamCity server settings that should be restricted, potentially exposing sensitive server configuration information (JetBrains Blog).

The vulnerability requires high privileges (project administrator access) and network access to exploit. The attack complexity is rated as low, suggesting that once an attacker has the required privileges, the exploitation is straightforward (AttackerKB).

The vulnerability has been fixed in TeamCity version 2019.1.4. Organizations should upgrade to this version or later to mitigate the issue (JetBrains Blog).