The vulnerability of the Continuous Integration and Deployment Application Delivery system (CI/CD) of JetBrains TeamCity, related to bypassing the authentication process through an alternative path or channel, allows a hacker to perform arbitrary actions.

🗓️ 15 Mar 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 8 Views

JetBrains TeamCity CI/CD authentication bypass via an alternative path, enabling remote arbitrary actions.

Reporter	Title	Published	Views	Family All 51
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	8 Mar 202412:40	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	9 Mar 202404:04	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	18 Oct 202516:45	–	githubexploit
GithubExploit	Exploit for CVE-2024-30851	4 Apr 202422:59	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	6 Mar 202403:15	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	5 Mar 202405:43	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	7 Mar 202415:12	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	22 Apr 202422:14	–	githubexploit
GithubExploit	Exploit for Path Traversal in Jetbrains Teamcity	22 Apr 202422:14	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	16 Aug 202405:39	–	githubexploit

Vulners

Node

jetbrains teamcityRange<2023.11.4

Source	Link
jetbrains	www.jetbrains.com/privacy-security/issues-fixed/
darkreading	www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive
github	www.github.com/Stuub/RCity-CVE-2024-27198
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
web	www.web.nvd.nist.gov/view/vuln/detail

22 Apr 2026 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 37.3

CVSS 27.5

EPSS0.99991

teamcity continuous integration delivery system authentication bypass alternative path remote actions