CI/CD

Security incidents tagged CI/CD. Newest first.

0 CI/CD incidents in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore

Show 4 older incidents

Mar 4CriticalJetBrains TeamCity on-prem auth bypass (CVE-2024-27198) exploitedPatched
JetBrains TeamCity Patched
JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions. Added to the CISA KEV catalog on 2024-03-07. CISA lists known use in ransomware campaigns.
Open incident →CVE-2024-27198 · CVE-2024-27199

Jan 24CriticalJenkins CLI arbitrary file read (CVE-2024-23897) leads to RCEPatched
Jenkins Command Line Interface (CLI) Patched
Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, which can lead to code execution. Added to the CISA KEV catalog on 2024-08-19. CISA lists known use in ransomware campaigns.
Open incident →CVE-2024-23897

Sep 18CriticalTeamCity On-Premises auth bypass to RCE, exploited by North Korea and Russia (CVE-2023-42793)Patched
JetBrains TeamCity On-Premises Patched
An authentication bypass in JetBrains TeamCity On-Premises gave unauthenticated attackers remote code execution on the CI server. Microsoft saw two North Korean groups exploit it, and US and allied agencies later said Russia's SVR (APT29) mass-exploited it. That's a direct path into build pipelines.
Open incident →CVE-2023-42793

CriticalNo fix needed
CircleCI breach: rotate every secret
Malware on a CircleCI engineer's laptop stole a 2FA-backed SSO session. The attacker then exfiltrated customer environment variables, tokens and keys along with the encryption keys, so CircleCI told every customer to rotate all secrets stored in the platform.
CircleCIClosed Jan 13, 2023updated Jan 13, 2023