In JetBrains TeamCity before version 2025.07.1, AWS credentials were exposed in Docker script files, potentially allowing unauthorized access to sensitive resources. This vulnerability poses a medium risk due to the low complexity of the attack and the potential for exploitation. Users of affected versions should take immediate action to secure their environments.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2025-57734 |
Exploitation
To exploit this vulnerability, an attacker would need to gain access to the Docker script files used by JetBrains TeamCity. Given the low attack complexity, an attacker could potentially use network access to retrieve these files and extract AWS credentials, leading to unauthorized access to AWS resources.
Affected Products
- JetBrains TeamCity: A continuous integration and deployment server that may expose AWS credentials in its Docker scripts.
Mitigation
To mitigate this vulnerability, users should upgrade to JetBrains TeamCity version 2025.07.1 or later, where this issue has been addressed. Additionally, it is recommended to review and secure Docker script files to ensure that sensitive credentials are not exposed.