search

google / tsunami-security-scanner-plugins

This project aims to provide a central repository for many useful Tsunami Security Scanner plugins.
Apache License 2.0
860 stars 178 forks source link

PRP: JetBrains TeamCity Authentication Bypass (CVE-2023-42793) #396

Closed OccamsXor closed 4 months ago

OccamsXor commented 4 months ago

Hello there,

I would like to start implementing a plugin to detect Jetbrains TeamCity Server Authentication Bypass leading to RCE (CVE-2023-42793). This vulnerability was published in 10/04/2023 and reportedly exploited by nation-state actors.

https://nvd.nist.gov/vuln/detail/CVE-2023-42793 https://blog.jetbrains.com/teamcity/2023/09/cve-2023-42793-vulnerability-post-mortem/ https://www.microsoft.com/en-us/security/blog/2023/10/18/multiple-north-korean-threat-actors-exploiting-the-teamcity-cve-2023-42793-vulnerability/

Description: In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible. Exploitation of this issue does not require user interaction.

Versions: Jetbrains TeamCity Server < 2023.05.4 (excluding)

I will send the PR if it is valid for the scope. Thank you.

tooryx commented 4 months ago

Hi @OccamsXor,

Thank you for your submission. We already have a detector for this vulnerability.

~tooryx