CVE-2021-37548: 
JetBrains TeamCity vulnerability analysis and mitigation

CVE-2021-37548 is a security vulnerability discovered in JetBrains TeamCity before version 2021.1. The vulnerability relates to the storage of passwords in cleartext format within Version Control System (VCS). This issue was disclosed and addressed by JetBrains in their Q2 2021 security bulletin (JetBrains Bulletin).

The vulnerability is classified as having Medium severity and is tracked as TW-71008 internally by JetBrains. The issue involves the improper storage of passwords, where they could sometimes be stored in plaintext format within the Version Control System, potentially exposing sensitive credentials (JetBrains Bulletin).

The vulnerability could lead to the exposure of sensitive credentials stored in the Version Control System. Since passwords were stored in cleartext, any user with access to the VCS could potentially view and misuse these credentials, compromising system security (JetBrains Bulletin).

The vulnerability was fixed in TeamCity version 2021.1. Users are advised to upgrade to this version or later to prevent the storage of passwords in cleartext within the VCS (JetBrains Bulletin).