Every CVE Search/ Get API key

CVE-2025-46432

In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logs

4.3 Medium

In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logs

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
None

Exploit likelihood

1.03%Up 1.0 points since Apr 26, 2025
90%50%10%1%

What each source reports

CVE List Score used 4.3

In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logs

Record
CVE-2025-46432
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weakness
CWE-532
Updated
2026-11-02
EUVDEUVD-2025-12534 4.3

In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logs

Record
EUVD-2025-12534
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-6wqg-77wv-92mv 4.3

In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logs

In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logs

Record
GHSA-6wqg-77wv-92mv
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Weakness
CWE-532
Updated
2026-11-02
NVD 4.3

In JetBrains TeamCity before 2025.03.1 base64-encoded credentials could be exposed in build logs

Record
CVE-2025-46432
CVSS 3.1
4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weakness
CWE-532
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
first indexedCVE List, EUVD, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-46432 is a medium vulnerability (CVSS 4.3) in Jetbrains Teamcity, published April 25, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.03%, the 63rd percentile. No source names a fixed version.

References

MoveEnter Open