Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity

🗓️ 22 Apr 2024 22:14:24Reported by StuubType

RCity is a Python script exploiting CVE-2024-27198 (RCE & Admin Account Creation) and CVE-2024-27199 (Auth Bypass) on vulnerable TeamCity servers. It facilitates unauthorized admin account creation, bypasses 403's, and achieves RCE. Script allows interaction with the server, remote code execution, user enumeration, and gathering server details

Reporter	Title	Published	Views	Family All 85
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	1 Jul 202601:36	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	18 May 202612:49	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	9 Oct 202413:36	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	9 Mar 202422:04	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	9 Oct 202413:36	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	8 Mar 202412:40	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	17 Dec 202515:54	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	9 Mar 202404:04	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	18 Oct 202516:45	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	4 Mar 202422:44	–	githubexploit

28 Jul 2025 11:53Current

9.3High risk

Vulners AI Score9.3

CVSS 3.19.8

EPSS0.99991

SSVC