Skip to content
OpenAdvisories
Medium · 6.6 CVE-2022-46831 EUVD-2022-49613GHSA-r49c-pqj4-g6ff

In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default Credential Provider Chain" allowed TeamCity projec…

Published Dec 8, 2022 · Updated Apr 22, 2025 · Assigned by JetBrains

Description

In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default Credential Provider Chain" allowed TeamCity project administrators to access AWS resources normally limited to TeamCity system administrators.

Affected products

VendorProductAffectedFixed
JetBrains TeamCity 2022.10 – < 2022.10.1 2022.10.1

References