CVE Watch—

CVE-2024-27198

JetBrains TeamCity Authentication Bypass Vulnerability

CVSS

—

No CVSS

EPSS

99.9%

p100

KEV

YES

Mar 7, 2024

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

99.9%EPSS · 30 days99.9%

2026-06-302026-07-16

KEV catalog record

Product

JetBrains / TeamCity

Vulnerability

JetBrains TeamCity Authentication Bypass Vulnerability

Added to KEV

Mar 7, 2024

Remediate by

Mar 28, 2024

Known ransomware use

Yes

Summary description

JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notes

https://www.jetbrains.com/help/teamcity/teamcity-2023-11-4-release-notes.html; https://blog.jetbrains.com/teamcity/2024/03/additional-critical-security-issues-affecting-teamcity-on-premises-cve-2024-27198-and-cve-2024-27199-update-to-2023-11-4-now/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-27198

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2024-27199—

100.0%

KEV—80JetBrains TeamCity Relative Path Traversal Vulnerability—CVE-2023-42793—

100.0%

KEV—80JetBrains TeamCity Authentication Bypass Vulnerability—