Protection Mechanism Failure in TeamCity - CVE-2021-43195
Published: November 8, 2021
Vulnerability identifier: #VU58004
CSH Severity: Low
CVSS v4: 6.3 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-43195
CWE-ID: CWE-693
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to bypass implemented security restrictions.
The vulnerability exists due to missing certain HTTP security headers. An attacker can bypass implemented security restrictions.
Affected software
TeamCity
How to mitigate CVE-2021-43195
Install updates from vendor's website.
TeamCity - update to 2021.1.2