CVE-2022-24335

Description

JetBrains TeamCity before 2021.2 was vulnerable to a Time-of-check/Time-of-use (TOCTOU) race-condition attack in agent registration via XML-RPC.

Affected Platforms

Weakness Type

CWE-367

References

• https://blog.jetbrains.com
• https://blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021/
• https://blog.jetbrains.com
• https://blog.jetbrains.com/blog/2022/02/08/jetbrains-security-bulletin-q4-2021/