TeamCity On-Premises auth bypass to RCE, exploited by North Korea and Russia (CVE-2023-42793) ยท updates https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2023-42793 An authentication bypass in JetBrains TeamCity On-Premises gave unauthenticated attackers remote code execution on the CI server. Microsoft saw two North Korean groups exploit it, and US and allied agencies later said Russia's SVR (APT29) mass-exploited it. That's a direct path into build pipelines. en Wed, 13 Dec 2023 00:00:00 GMT TeamCity On-Premises auth bypass to RCE, exploited by North Korea and Russia (CVE-2023-42793): CISA, FBI, NSA and partners: Russia's SVR exploiting TeamCity at scale (AA23-347A) https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2023-42793 https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2023-42793#2023-12-13-11cce556 Wed, 13 Dec 2023 00:00:00 GMT critical <p><a href="https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-347a">Source</a></p> TeamCity On-Premises auth bypass to RCE, exploited by North Korea and Russia (CVE-2023-42793): Microsoft: North Korean actors Diamond Sleet and Onyx Sleet are exploiting it https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2023-42793 https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2023-42793#2023-10-18-fefb7c2a Wed, 18 Oct 2023 00:00:00 GMT critical <p><a href="https://www.microsoft.com/en-us/security/blog/2023/10/18/multiple-north-korean-threat-actors-exploiting-the-teamcity-cve-2023-42793-vulnerability/">Source</a></p> TeamCity On-Premises auth bypass to RCE, exploited by North Korea and Russia (CVE-2023-42793): CISA adds CVE-2023-42793 to the KEV catalog https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2023-42793 https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2023-42793#2023-10-04-5dee3bfc Wed, 04 Oct 2023 00:00:00 GMT critical <p>TeamCity On-Premises auth bypass to RCE, exploited by North Korea and Russia (CVE-2023-42793): CISA adds CVE-2023-42793 to the KEV catalog</p> TeamCity On-Premises auth bypass to RCE, exploited by North Korea and Russia (CVE-2023-42793): JetBrains releases TeamCity 2023.05.4 and a security patch plugin https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2023-42793 https://pwn.watch/i/jetbrains-teamcity-auth-bypass-cve-2023-42793#2023-09-18-0c62821b Mon, 18 Sep 2023 00:00:00 GMT critical <p><a href="https://blog.jetbrains.com/teamcity/2023/09/critical-security-issue-affecting-teamcity-on-premises-update-to-2023-05-4-now/">Source</a></p>