In JetBrains TeamCity before version 2025.07.1, AWS credentials were exposed in Docker script files, potentially allowing unauthorized access to sensitive resources. This vulnerability poses a risk to the confidentiality of AWS credentials, which could be exploited by attackers. Users of affected versions should take immediate action to secure their environments.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2025-57734 |
Exploitation
To exploit this vulnerability, an attacker would need to gain access to the Docker script files used in JetBrains TeamCity. Given the low attack complexity and the fact that the attack vector is network-based, an attacker could potentially intercept these files if proper security measures are not in place, leading to the exposure of AWS credentials.
Affected Products
- JetBrains TeamCity: A continuous integration and deployment server that may expose AWS credentials in its Docker scripts.
Mitigation
To mitigate this vulnerability, users should upgrade to JetBrains TeamCity version 2025.07.1 or later. Additionally, it is recommended to review and secure Docker script files to ensure that sensitive credentials are not exposed. Implementing best practices for credential management and access control can further reduce the risk.