In JetBrains TeamCity before version 2025.07.1, AWS credentials were exposed in Docker script files. This vulnerability could potentially allow unauthorized access to sensitive AWS resources. Users are advised to update their TeamCity installations to mitigate this risk.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2025-57734 |
Exploitation
To exploit this vulnerability, an attacker could gain access to the Docker script files used by JetBrains TeamCity, which may contain AWS credentials. By leveraging these credentials, the attacker could potentially access and manipulate AWS resources without authorization.
Affected Products
- JetBrains TeamCity: A continuous integration and deployment server that may expose AWS credentials in its Docker scripts.
Mitigation
To mitigate this vulnerability, users should upgrade to JetBrains TeamCity version 2025.07.1 or later. Additionally, it is recommended to review and secure any Docker scripts to ensure that sensitive credentials are not exposed.