CVE Watch—

CVE-2024-27198

JetBrains TeamCity Authentication Bypass Vulnerability

CVSS

—

Sem CVSS

EPSS

99.9%

p100

KEV

SIM

7 de mar. de 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

99.9%EPSS · 30 dias99.9%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

JetBrains / TeamCity

Vulnerabilidade

JetBrains TeamCity Authentication Bypass Vulnerability

Adicionado ao KEV

7 de mar. de 2024

Corrigir até

28 de mar. de 2024

Uso conhecido em ransomware

Sim

Descrição resumida

JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://www.jetbrains.com/help/teamcity/teamcity-2023-11-4-release-notes.html; https://blog.jetbrains.com/teamcity/2024/03/additional-critical-security-issues-affecting-teamcity-on-premises-cve-2024-27198-and-cve-2024-27199-update-to-2023-11-4-now/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-27198

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-630779.8 CRÍ

99.9%

KEV—80JetBrains TeamCity Deserialization of Untrusted Data Vulnerability12d CVE-2024-27199—

100.0%

KEV—80JetBrains TeamCity Relative Path Traversal Vulnerability—CVE-2023-42793—

100.0%

KEV—80JetBrains TeamCity Authentication Bypass Vulnerability—