According to its its self-reported version number, the version of JetBrains TeamCity running on the remote host is a version prior to 2020.2.4. It is, therefore, affected by multiple vulnerabilities:
    
  - A command injection vulnerability exists in JetBrains TeamCity. An unauthenticated, remote     attacker can exploit this to execute arbitrary commands. (CVE-2021-31915)

  - An arbitrary code execution vulnerability exists in JetBrains TeamCity. An unauthenticated,     remote attacker can exploit this to bypass authentication and execute arbitrary commands. (CVE-2021-31914)

  - A remote code execution vulnerability exists in JetBrains TeamCity. An unauthenticated,     remote attacker can exploit this to bypass authentication and execute arbitrary commands. (CVE-2021-31909)

Note that Nessus did not actually test for these issues, but instead has relied on the version found in the server's banner.

Detections

Analytics

TeamCity Server < 2020.2.4 Multiple Vulnerabilities

critical Nessus Plugin ID 151791

Version 1.6

Version 1.5

Version 1.4

Version 1.3

Version 1.6 May 27, 2025, 1:54 AM IAVM reference Plugin Feed: 202505270154
Version 1.5 Oct 25, 2024, 2:42 PM Plugin metadata (update enable_cgi_scanning attribute) Plugin Feed: 202410251442
Version 1.4 Jun 14, 2024, 4:55 PM IAVM reference Plugin Feed: 202406141655
Version 1.3 Jun 14, 2024, 2:32 PM IAVM reference Plugin Feed: 202406141432