Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-15008 State: PUBLISHED Published: 2019-12-11T14:41:13.338614Z Last Updated: 2024-09-16T23:21:09.755Z Vendors: Atlassian Products: Crucible, Fisheye Problem Types: Cross Site Scripting (XSS) Description: The /plugins/servlet/branchreview resource in Atlassian Fisheye and Crucible before version 4.7.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the reviewedBranch parameter. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/CRUC-8441 - https://jira.atlassian.com/browse/FE-7251
CVE ID: CVE-2019-15009 State: PUBLISHED Published: 2019-12-11T14:41:13.369901Z Last Updated: 2024-09-17T00:26:28.578Z Vendors: Atlassian Products: Crucible, Fisheye Problem Types: Improper Access Control Description: The /json/profile/removeStarAjax.do resource in Atlassian Fisheye and Crucible before version 4.8.0 allows remote attackers to remove another user's favourite setting for a project via an improper authorization vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/CRUC-8443 - https://jira.atlassian.com/browse/FE-7252
CVE ID: CVE-2019-15010 State: PUBLISHED Published: 2020-01-15T20:46:56.108707Z Last Updated: 2024-09-16T22:56:09.402Z Vendors: Atlassian Products: Bitbucket Server, Bitbucket Data Center Problem Types: Expression Language Injection Description: Bitbucket Server and Bitbucket Data Center versions starting from version 3.0.0 before version 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0 before 6.1.9, from version 6.2.0 before 6.2.7, from version 6.3.0 before 6.3.6, from version 6.4.0 before 6.4.4, from version 6.5.0 before 6.5.3, from version 6.6.0 before 6.6.3, from version 6.7.0 before 6.7.3, from version 6.8.0 before 6.8.2, and from version 6.9.0 before 6.9.1 had a Remote Code
from version 6.7.0 before 6.7.3, from version 6.8.0 before 6.8.2, and from version 6.9.0 before 6.9.1 had a Remote Code Execution vulnerability via certain user input fields. A remote attacker with user level permissions can exploit this vulnerability to run arbitrary commands on the victim's systems. Using a specially crafted payload as user input, the attacker can execute arbitrary commands on the victim's Bitbucket Server or Bitbucket Data Center instance. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/BSERV-12098
CVE ID: CVE-2019-15011 State: PUBLISHED Published: 2019-12-17T03:45:14.059031Z Last Updated: 2024-09-16T19:50:47.187Z Vendors: Atlassian Products: Application Links Problem Types: Information Exposure Description: The ListEntityLinksServlet resource in Application Links before version 5.0.12, from version 5.1.0 before version 5.2.11, from version 5.3.0 before version 5.3.7, from version 5.4.0 before 5.4.13, and from version 6.0.0 before 6.0.5 disclosed application link information to non-admin users via a missing permissions check. Additional Analyst Notes: - CVE Program Container: References: - https://ecosystem.atlassian.net/browse/APL-1386
CVE ID: CVE-2019-15012 State: PUBLISHED Published: 2020-01-15T20:46:56.181070Z Last Updated: 2024-09-17T04:24:12.976Z Vendors: Atlassian Products: Bitbucket Server, Bitbucket Data Center Problem Types: Path traversal Description: Bitbucket Server and Bitbucket Data Center from version 4.13. before 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0 before 6.1.9, from version 6.2.0 before 6.2.7, from version 6.3.0 before 6.3.6, from version 6.4.0 before 6.4.4, from version 6.5.0 before 6.5.3, from version 6.6.0 before 6.6.3, from version 6.7.0 before 6.7.3, from version 6.8.0 before 6.8.2, from version 6.9.0 before 6.9.1 had a Remote Code Execution vulnerability via the edit-file re
rsion 6.8.0 before 6.8.2, from version 6.9.0 before 6.9.1 had a Remote Code Execution vulnerability via the edit-file request. A remote attacker with write permission on a repository can write to any arbitrary file to the victims Bitbucket Server or Bitbucket Data Center instance using the edit-file endpoint, if the user has Bitbucket Server or Bitbucket Data Center running, and has the permission to write the file at that destination. In some cases, this can result in execution of arbitrary code by the victims Bitbucket Server or Bitbucket Data Center instance. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/BSERV-12100
CVE ID: CVE-2019-15013 State: PUBLISHED Published: 2019-12-18T03:30:12.315609Z Last Updated: 2024-09-16T16:57:38.126Z Vendors: Atlassian Products: Jira Problem Types: Improper Authorization Description: The WorkflowResource class removeStatus method in Jira before version 7.13.12, from version 8.0.0 before version 8.4.3, and from version 8.5.0 before version 8.5.2 allows authenticated remote attackers who do not have project administration access to remove a configured issue status from a project via a missing authorisation check. Additional Analyst Notes: - CVE Program Container: References: - https://jira.atlassian.com/browse/JRASERVER-70405
CVE ID: CVE-2019-15014 State: PUBLISHED Published: 2019-10-09T20:20:28 Last Updated: 2024-08-05T00:34:53.237Z Vendors: n/a Products: Palo Alto Networks Zingbox Inspector Problem Types: Command Injection Description: A command injection vulnerability exists in the Zingbox Inspector versions 1.286 and earlier, that allows for an authenticated user to execute arbitrary system commands in the CLI. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2019-15014
CVE ID: CVE-2019-15015 State: PUBLISHED Published: 2019-10-09T20:20:28 Last Updated: 2024-08-05T00:34:52.975Z Vendors: n/a Products: Palo Alto Networks Zingbox Inspector Problem Types: Use of Hard-coded Credentials Description: In the Zingbox Inspector, versions 1.294 and earlier, hardcoded credentials for root and inspector user accounts are present in the system software, which can result in unauthorized users gaining access to the system. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2019-15015
CVE ID: CVE-2019-15016 State: PUBLISHED Published: 2019-10-09T20:20:28 Last Updated: 2024-08-05T00:34:53.168Z Vendors: n/a Products: Palo Alto Networks Zingbox Inspector Problem Types: SQL Injection Description: An SQL injection vulnerability exists in the management interface of Zingbox Inspector versions 1.288 and earlier, that allows for unsanitized data provided by an authenticated user to be passed from the web UI into the database. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2019-15016
CVE ID: CVE-2019-15017 State: PUBLISHED Published: 2019-10-09T20:20:28 Last Updated: 2024-08-05T00:34:53.065Z Vendors: n/a Products: Palo Alto Networks Zingbox Inspector Problem Types: Improper Access Control Description: The SSH service is enabled on the Zingbox Inspector versions 1.294 and earlier, exposing SSH to the local network. When combined with PAN-SA-2019-0027, this can allow an attacker to authenticate to the service using hardcoded credentials. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2019-15017
CVE ID: CVE-2019-15018 State: PUBLISHED Published: 2019-10-09T20:20:28 Last Updated: 2024-08-05T00:34:53.190Z Vendors: n/a Products: Palo Alto Networks Zingbox Inspector Problem Types: Authentication Bypass Using an Alternate Path or Channel Description: A security vulnerability exists in the Zingbox Inspector versions 1.280 and earlier, where authentication is not required when binding the Inspector instance to a different customer tenant. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2019-15018
CVE ID: CVE-2019-15019 State: PUBLISHED Published: 2019-10-09T20:20:28 Last Updated: 2024-08-05T00:34:53.082Z Vendors: n/a Products: Palo Alto Networks Zingbox Inspector Problem Types: Improper Validation of Integrity Check Value Description: A security vulnerability exists in the Zingbox Inspector versions 1.294 and earlier, that could allow an attacker to supply an invalid software update image to the Zingbox Inspector. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2019-15019
CVE ID: CVE-2019-15020 State: PUBLISHED Published: 2019-10-09T20:20:28 Last Updated: 2024-08-05T00:34:53.009Z Vendors: n/a Products: Palo Alto Networks Zingbox Inspector Problem Types: Command Injection Description: A security vulnerability exists in the Zingbox Inspector versions 1.293 and earlier, that could allow an attacker to supply an invalid software update image to the Zingbox Inspector that could result in command injection. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2019-15020
CVE ID: CVE-2019-15021 State: PUBLISHED Published: 2019-10-09T20:20:28 Last Updated: 2024-08-05T00:34:53.157Z Vendors: n/a Products: Palo Alto Networks Zingbox Inspector Problem Types: Information Exposure Through Sent Data Description: A security vulnerability exists in the Zingbox Inspector versions 1.294 and earlier, that can allow an attacker to easily identify instances of Zingbox Inspectors in a local area network. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2019-15021
CVE ID: CVE-2019-15022 State: PUBLISHED Published: 2019-10-09T20:20:28 Last Updated: 2024-08-05T00:34:53.001Z Vendors: n/a Products: Palo Alto Networks Zingbox Inspector Problem Types: ARP Spoofing Description: A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that allows for the Inspector to be susceptible to ARP spoofing. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2019-15022
CVE ID: CVE-2019-15023 State: PUBLISHED Published: 2019-10-09T20:20:28 Last Updated: 2024-08-05T00:34:53.206Z Vendors: n/a Products: Palo Alto Networks Zingbox Inspector Problem Types: Cleartext Storage of Sensitive Information Description: A security vulnerability exists in Zingbox Inspector versions 1.294 and earlier, that results in passwords for 3rd party integrations being stored in cleartext in device configuration. Additional Analyst Notes: - CVE Program Container: References: - https://security.paloaltonetworks.com/CVE-2019-15023
CVE ID: CVE-2019-15024 State: PUBLISHED Published: 2019-12-30T14:39:00 Last Updated: 2024-08-05T00:34:53.024Z Vendors: n/a Products: ClickHouse Problem Types: Arbitrary write Description: In all versions of ClickHouse before 19.14.3, an attacker having write access to ZooKeeper and who is able to run a custom server available from the network where ClickHouse runs, can create a custom-built malicious server that will act as a ClickHouse replica and register it in ZooKeeper. When another replica will fetch data part from the malicious replica, it can force clickhouse-server to write to arbitrary path on filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://click
to write to arbitrary path on filesystem. Additional Analyst Notes: - CVE Program Container: References: - https://clickhouse.yandex/docs/en/security_changelog/
CVE ID: CVE-2019-15025 State: PUBLISHED Published: 2019-08-14T14:49:35 Last Updated: 2024-08-05T00:34:53.136Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ninja-forms plugin before 3.3.21.2 for WordPress has SQL injection in the search filter on the submissions page. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/ninja-forms/#developers
CVE ID: CVE-2019-15026 State: PUBLISHED Published: 2019-08-30T14:32:01 Last Updated: 2024-08-05T00:34:53.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: memcached 1.5.16, when UNIX sockets are used, has a stack-based buffer over-read in conn_to_str in memcached.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/memcached/memcached/wiki/ReleaseNotes1517 - https://github.com/memcached/memcached/commit/554b56687a19300a75ec24184746b5512580c819 - https://lists.debian.org/debian-lts-announce/2019/09/msg00006.html - https://usn.ubuntu.com/4125-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOD
buntu.com/4125-1/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOD422IS2OPXRDID5EKFZHFUHK2BLQGJ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QDBV5OGV3FJDAH4NO4JSXNRWHDGGKWYB/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FYGUBOEM5HX4GRMWVEKOJUFICF77ME47/ - http://lists.opensuse.org/opensuse-security-announce/2020-05/msg00060.html
CVE ID: CVE-2019-15027 State: PUBLISHED Published: 2019-08-14T12:03:35 Last Updated: 2024-08-05T00:34:53.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MediaTek Embedded Multimedia Card (eMMC) subsystem for Android on MT65xx, MT66xx, and MT8163 SoC devices allows attackers to execute arbitrary commands as root via shell metacharacters in a filename under /data, because clear_emmc_nomedia_entry in platform/mt6577/external/meta/emmc/meta_clr_emmc.c invokes 'system("/system/bin/rm -r /data/' followed by this filename upon an eMMC clearance from a Meta Mode boot. NOTE: compromise of Fire OS on the Amazon Echo Dot would require a second hypothetical vulnerability that allows
boot. NOTE: compromise of Fire OS on the Amazon Echo Dot would require a second hypothetical vulnerability that allows creation of the required file under /data. Additional Analyst Notes: - CVE Program Container: References: - https://dojo.bullguard.com/dojo-by-bullguard/blog/gaining-rooting-primitives-for-android-mediatek-chips/ - https://github.com/andr3jx/MTK6577/blob/238012ebf18e3751397884d1742ff7ab6417e80d/mediatek/platform/mt6577/external/meta/emmc/meta_clr_emmc.c#L302-L305
CVE ID: CVE-2019-15028 State: PUBLISHED Published: 2019-08-14T03:57:51 Last Updated: 2024-08-05T00:34:53.110Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Joomla! before 3.9.11, inadequate checks in com_contact could allow mail submission in disabled forms. Additional Analyst Notes: - CVE Program Container: References: - https://developer.joomla.org/security-centre/789-20190801-core-hardening-com-contact-contact-form
CVE ID: CVE-2019-15029 State: PUBLISHED Published: 2019-09-05T20:46:38 Last Updated: 2024-08-05T00:34:53.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: FusionPBX 4.4.8 allows an attacker to execute arbitrary system commands by submitting a malicious command to the service_edit.php file (which will insert the malicious command into the database). To trigger the command, one needs to call the services.php file via a GET request with the service id followed by the parameter a=start to execute the stored command. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/mhaskar/7a6a804cd68c7fec4f9d1f5c3507900f - https://drive.google.com/file/d/1bt0
r: References: - https://gist.github.com/mhaskar/7a6a804cd68c7fec4f9d1f5c3507900f - https://drive.google.com/file/d/1bt08NSUaxu87LJJGdNd7LpvZ2uGauRK8/view?usp=sharing - https://shells.systems/fusionpbx-v4-4-8-authenticated-remote-code-execution-cve-2019-15029/
CVE ID: CVE-2019-15030 State: PUBLISHED Published: 2019-09-13T12:37:22 Last Updated: 2024-08-05T00:34:53.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process because of a missing arch/powerpc/kernel/process.c check. Additional Analyst Notes: - CVE Program Conta
al Linux process because of a missing arch/powerpc/kernel/process.c check. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8205d5d98ef7f155de211f5e2eb6ca03d95a5a60 - http://www.openwall.com/lists/oss-security/2019/09/10/3 - https://usn.ubuntu.com/4135-2/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html - https://usn.ubuntu.com/4135-1/ - https://security.netapp.com/advisory/ntap-20191004-0001/ - https://access.redhat.com/errata/RHSA-2020:0740
CVE ID: CVE-2019-15031 State: PUBLISHED Published: 2019-09-13T12:45:49 Last Updated: 2024-08-05T00:34:53.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then accesses vector registers. At some point, the vector registers will be corrupted with the values from a different local Linux process, because MSR_TM_ACTIVE is misused in arch/powerpc/kernel/process.c. Additional Analyst Notes: - CVE Program Container: Refe
cause MSR_TM_ACTIVE is misused in arch/powerpc/kernel/process.c. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a8318c13e79badb92bc6640704a64cc022a6eb97 - http://www.openwall.com/lists/oss-security/2019/09/10/4 - https://usn.ubuntu.com/4135-2/ - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00064.html - http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00066.html - https://usn.ubuntu.com/4135-1/ - https://security.netapp.com/advisory/ntap-20191004-0001/
CVE ID: CVE-2019-15032 State: PUBLISHED Published: 2019-09-19T16:03:06 Last Updated: 2024-08-05T00:34:53.070Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pydio 6.0.8 mishandles error reporting when a directory allows unauthenticated uploads, and the remote-upload option is used with the http://localhost:22 URL. The attacker can obtain sensitive information such as the name of the user who created that directory and other internal server information. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/ajaxplorer/files/pydio/stable-channel/ - https://pydio.com - https://heitorgouvea.me/2019/09/17/CVE-2019-15032
CVE ID: CVE-2019-15033 State: PUBLISHED Published: 2019-09-19T16:12:30 Last Updated: 2024-08-05T00:34:53.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pydio 6.0.8 allows Authenticated SSRF during a Remote Link Feature download. An attacker can specify an intranet address in the file parameter to index.php, when sending a file to a remote server, as demonstrated by the file=http%3A%2F%2F192.168.1.2 substring. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/projects/ajaxplorer/files/pydio/stable-channel/ - https://pydio.com - https://heitorgouvea.me/2019/09/17/CVE-2019-15033
CVE ID: CVE-2019-15034 State: PUBLISHED Published: 2020-03-10T17:19:02 Last Updated: 2024-08-05T00:34:53.171Z Vendors: n/a Products: n/a Problem Types: n/a Description: hw/display/bochs-display.c in QEMU 4.0.0 does not ensure a sufficient PCI config space allocation, leading to a buffer overflow involving the PCIe extended config space. Additional Analyst Notes: - CVE Program Container: References: - https://lists.gnu.org/archive/html/qemu-devel/2019-08/msg01959.html - http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00007.html - https://www.debian.org/security/2020/dsa-4665 - https://usn.ubuntu.com/4372-1/
CVE ID: CVE-2019-15035 State: PUBLISHED Published: 2019-10-01T19:32:36 Last Updated: 2024-08-05T00:34:52.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in JetBrains TeamCity 2018.2.4. A TeamCity Project administrator could get access to potentially confidential server-level data. The issue was fixed in TeamCity 2018.2.5 and 2019.1. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019/
CVE ID: CVE-2019-15036 State: PUBLISHED Published: 2019-10-02T18:36:47 Last Updated: 2024-08-05T00:34:53.116Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in JetBrains TeamCity 2018.2.4. A TeamCity Project administrator could execute any command on the server machine. The issue was fixed in TeamCity 2018.2.5 and 2019.1. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019/
CVE ID: CVE-2019-15037 State: PUBLISHED Published: 2019-10-02T18:34:31 Last Updated: 2024-08-05T00:34:53.064Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in JetBrains TeamCity 2018.2.4. It had several XSS vulnerabilities on the settings pages. The issues were fixed in TeamCity 2019.1. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019/
CVE ID: CVE-2019-15038 State: PUBLISHED Published: 2019-10-01T15:46:08 Last Updated: 2024-08-05T00:34:53.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in JetBrains TeamCity 2018.2.4. The TeamCity server was not using some security-related HTTP headers. The issue was fixed in TeamCity 2019.1. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019/
CVE ID: CVE-2019-15039 State: PUBLISHED Published: 2019-10-01T13:20:36 Last Updated: 2024-08-05T00:34:53.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in JetBrains TeamCity 2018.2.4. It had a possible remote code execution issue. This was fixed in TeamCity 2019.1. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019/ - http://packetstormsecurity.com/files/155874/JetBrains-TeamCity-2018.2.4-Remote-Code-Execution.html
CVE ID: CVE-2019-15040 State: PUBLISHED Published: 2019-10-02T18:32:50 Last Updated: 2024-08-05T00:34:53.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: JetBrains YouTrack versions before 2019.1 had a CSRF vulnerability on the settings page. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019/
CVE ID: CVE-2019-15041 State: PUBLISHED Published: 2019-10-01T19:35:41 Last Updated: 2024-08-05T00:34:53.109Z Vendors: n/a Products: n/a Problem Types: n/a Description: JetBrains YouTrack versions before 2019.1.52545 allowed unbounded URL whitelisting because of Inclusion of Functionality from an Untrusted Control Sphere. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019/
CVE ID: CVE-2019-15042 State: PUBLISHED Published: 2019-10-01T16:41:34 Last Updated: 2024-08-05T00:34:53.104Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in JetBrains TeamCity 2018.2.4. It had no SSL certificate validation for some external https connections. This was fixed in TeamCity 2019.1. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com/blog/2019/09/26/jetbrains-security-bulletin-q2-2019/