JetBrains TeamCity - Registration Enabled

What is "JetBrains TeamCity - Registration Enabled?"

The "JetBrains TeamCity - Registration Enabled" module is designed to detect a misconfiguration in the JetBrains TeamCity software. JetBrains TeamCity is a popular continuous integration and build management server. This module focuses on the misconfiguration that allows all visitors to register on the TeamCity platform, which can lead to potential security vulnerabilities.

This module has a severity level of high, indicating the importance of addressing this misconfiguration to prevent unauthorized access and potential attacks.

This module was authored by Ph33r.

Impact

The misconfiguration in JetBrains TeamCity that allows all visitors to register can have several potential impacts:

- Unauthorized users can gain access to the TeamCity platform. - Potential for privilege escalation and unauthorized actions within the platform. - Potential exposure of sensitive information stored within the TeamCity platform.

How the module works?

The "JetBrains TeamCity - Registration Enabled" module works by sending an HTTP request to the target TeamCity server and checking for a specific response. The module sends a GET request to the "/registerUser.html?init=1" endpoint.

The module then checks the response for the presence of the following HTML code:

<title>Register a New User Account ? TeamCity</title>

If the response contains this HTML code, it indicates that the misconfiguration allowing registration is present.

The module uses matching conditions to determine if the misconfiguration is present. In this case, it uses a word matcher to check if the response contains the specific HTML code. If the condition is met, the module reports the vulnerability.

For more information, you can refer to the Ph33r's article on the misconfiguration in TeamCity that can lead to an authentication bypass.