CVE-2025-57734: 
JetBrains TeamCity vulnerability analysis and mitigation

In JetBrains TeamCity before version 2025.07.1, AWS credentials were exposed in Docker script files. The vulnerability was assigned CVE-2025-57734 and was disclosed on August 20, 2025. This security issue affects JetBrains TeamCity installations and was categorized with CWE-538 (Insertion of Sensitive Information into Externally-Accessible File or Directory) (NVD).

The vulnerability received a CVSS v3.1 base score of 6.5 (Medium) from NIST NVD with vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, indicating network accessibility, low attack complexity, and high impact on confidentiality. JetBrains' own assessment assigned a lower CVSS score of 4.3 (Medium) with vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N (NVD).

The exposure of AWS credentials in Docker script files could potentially allow attackers to gain unauthorized access to AWS resources and services associated with the exposed credentials. This primarily affects the confidentiality of sensitive authentication information, with no direct impact on system integrity or availability (NVD).

The vulnerability has been fixed in TeamCity version 2025.07.1. Users are advised to upgrade to this version or later to address the security issue (JetBrains Advisory).