CVE-2023-34223: 
JetBrains TeamCity vulnerability analysis and mitigation

In JetBrains TeamCity before 2023.05, a security vulnerability was identified where parameters of the "password" type from build dependencies could be logged in some cases. This vulnerability was assigned CVE-2023-34223 and was disclosed in May 2023 (NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 5.3 (Medium) by NIST with a vector string of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. JetBrains s.r.o. assessed it with a slightly lower score of 4.3 (Medium) with vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. The vulnerability is classified under CWE-532 (Insertion of Sensitive Information into Log File) (NVD).

The primary impact of this vulnerability is the potential exposure of sensitive password information in log files. This could lead to unauthorized access to password parameters from build dependencies, compromising the confidentiality of sensitive build configuration data (NVD).

The vulnerability has been fixed in JetBrains TeamCity version 2023.05. Users are advised to upgrade to this version or later to mitigate the risk (JetBrains Advisory).