CVE-2022-46831

—

CVSS 3.1

4.9 medium

EPSS

<1%p38

Published

Dec 8, 2022 (Dec 8, 2022)

Modified

Jun 17, 2026

Description

In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default Credential Provider Chain" allowed TeamCity project administrators to access AWS resources normally limited to TeamCity system administrators.

Vendors: jetbrains
Products: teamcity
Weakness: CWE-453, CWE-1188
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.