CVE-2024-27199

2024-03-0400:00:00

attackerkb.com

cve-2024-27199

jetbrains teamcity

path traversal

limited admin actions

information disclosure

system modification

unauthenticated attacker

https certificate

9.1 High

AI Score

Confidence

High

0.972 High

EPSS

Percentile

99.8%

JSON

In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

Recent assessments:

sfewer-r7 at March 04, 2024 8:16pm UTC reported:

CVE-2024-27199, allows for a limited amount of information disclosure and a limited amount of system modification, including the ability for an unauthenticated attacker to replace the HTTPS certificate in a vulnerable TeamCity server with a certificate of the attacker’s choosing.

Assessed Attacker Value: 3
Assessed Attacker Value: 3Assessed Attacker Value: 5