"Rapid7 says it reported the two TeamCity vulnerabilities in mid-February, claiming JetBrains soon after suggested releasing patches for the flaws before publicly disclosing them.
Such a move is typically seen as a no-no by the infosec community,..."
As far as I am aware the majority of the infosec community would prefer to release a patch before releasing a security issue, but what do I know...
Such a move is typically seen as a no-no by the infosec community,..."
As far as I am aware the majority of the infosec community would prefer to release a patch before releasing a security issue, but what do I know...