CISA Warns of Actively Exploited JetBrains TeamCity Vulnerability

🗓️ 08 Mar 2024 06:13:00Reported by The Hacker NewsType

CISA warns of actively exploited JetBrains TeamCity vulnerability. CVE-2024-27198 allows complete compromise of susceptible server. CVE-2024-27199 permits limited information disclosure and system modification. Threat actors deliver Jasmin ransomware and create rogue user accounts.

Reporter	Title	Published	Views	Family All 105
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	1 Jul 202601:36	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	18 May 202612:49	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	9 Oct 202413:36	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	9 Mar 202422:04	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	9 Oct 202413:36	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	8 Mar 202412:40	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	17 Dec 202515:54	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	9 Mar 202404:04	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	18 Oct 202516:45	–	githubexploit
GithubExploit	Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity	4 Mar 202422:44	–	githubexploit

08 Mar 2024 06:13Current

7.8High risk

Vulners AI Score7.8

CVSS 3.19.8

EPSS0.99991

SSVC