CVE-2021-37548

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In JetBrains TeamCity before 2021.1, passwords in cleartext sometimes could be stored in VCS.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-312

Affected software

No affected versions have been published.

Timeline

Published
Aug 6, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-375499.1In JetBrains YouTrack before 2021.1.11111, sandboxing in workflows was insufficient.CVE-2021-375507.5In JetBrains YouTrack before 2021.2.16363, time-unsafe comparisons were used.CVE-2021-375515.3In JetBrains YouTrack before 2021.2.16363, system user passwords were hashed with SHA-256.CVE-2021-375525.4In JetBrains YouTrack before 2021.2.17925, stored XSS was possible.CVE-2021-375537.5In JetBrains YouTrack before 2021.2.16363, an insecure PRNG was used.CVE-2021-375544.3In JetBrains YouTrack before 2021.3.21051, a user could see boards without having corresponding permissions.CVE-2021-375559.8TX9 Automatic Food Dispenser v3.2.57 devices allow access to a shell as root/superuser, a related issue to CVE-2019-16734. To connect, the tCVE-2021-375568.8A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-priCVE-2021-375578.8A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-priCVE-2021-375589.8A SQL injection vulnerability in a MediaWiki script in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote unauthenticated attackerCVE-2021-37569.8libmysofa is vulnerable to Heap-based Buffer OverflowCVE-2021-375608.8MediaTek microchips, as used in NETGEAR devices through 2021-11-11 and other devices, mishandle the WPS (Wi-Fi Protected Setup) protocol. (A
CVE-2021-37548: High severity, CVSS 7.5 | Vulnix