CVE-2024-56348: 
JetBrains TeamCity vulnerability analysis and mitigation

In JetBrains TeamCity before version 2024.12, a security vulnerability was identified involving improper access control that allowed unauthorized viewing of agent details. The vulnerability was discovered and disclosed on December 20, 2024, and was assigned identifier CVE-2024-56348. This security issue affects JetBrains TeamCity installations prior to version 2024.12 (NVD Database).

The vulnerability has been assessed with a CVSS v3.1 Base Score of 4.3 (MEDIUM) with the following vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. This indicates that the vulnerability requires network access and low privileges to exploit, with no user interaction needed. The vulnerability is classified under CWE-863 (Incorrect Authorization) (NVD Database).

The vulnerability allows unauthorized users to view details of agents they should not have access to, potentially exposing sensitive information about the TeamCity infrastructure (NVD Database).

The vulnerability has been fixed in JetBrains TeamCity version 2024.12. Users are advised to upgrade to this version or later to mitigate the security risk (JetBrains Advisory).