Lucene search
Wiz BlogWIZBLOG:5A18101AD798F7961DDC629B4FC1C8FCHistoryMar 06, 2024 - 4:49 p.m.
Authentication bypass vulnerabilities in TeamCity: everything you need to know
2024-03-0616:49:16
Wiz Blog
www.wiz.io
12
authentication bypass
teamcity
mitigate
jetbrains
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.7
Confidence
Low
EPSS
0.972
Percentile
99.9%
Detect and mitigate CVE-2024-27198 (CVSS score: 9.8) and CVE-2024-27199 (CVSS score: 7.3), authentication bypass vulnerabilities in JetBrains TeamCity.
Related
attackerkb
attackerkb
CVE-2024-27198
2024-03-04 00:00:00
CVE-2024-27199
2024-03-04 00:00:00
nuclei
nuclei
TeamCity < 2023.11.4 - Authentication Bypass
2024-03-04 20:18:08
TeamCity < 2023.11.4 - Authentication Bypass
2024-03-04 20:33:19
hivepro
hivepro
TeamCity Vulnerabilities Unleash Jasmin Ransomware and More
2024-03-23 02:00:31
Critical Vulnerabilities Discovered in TeamCity, Enable Server Takeover
2024-03-06 17:21:03
Attacks, Vulnerabilities and Actors 4 to 10 March 2024
2024-03-13 07:25:00
githubexploit
githubexploit
thn
thn
CISA Warns of Actively Exploited JetBrains TeamCity Vulnerability
2024-03-08 06:13:00
Critical JetBrains TeamCity On-Premises Flaws Could Lead to Server Takeovers
2024-03-05 03:34:00
TeamCity Flaw Leads to Surge in Ransomware, Cryptomining, and RAT Attacks
2024-03-20 11:26:00
rapid7blog
rapid7blog
What’s New in Rapid7 Products & Services: Q1 2024 in Review
2024-04-04 13:00:00
CVE-2024-27198 and CVE-2024-27199: JetBrains TeamCity Multiple Authentication Bypass Vulnerabilities (FIXED)
2024-03-04 19:17:01
Metasploit Wrap-Up 03/15/2024
2024-03-15 18:20:02
nessus
nessus
TeamCity Server < 2023.11.4 Multiple Vulnerabilities
2024-03-05 00:00:00
JetBrains TeamCity Authentication Bypass (CVE-2024-27198)
2024-03-05 00:00:00
JetBrains TeamCity Path Traversal (CVE-2024-27199)
2024-03-08 00:00:00
metasploit
metasploit
JetBrains TeamCity Unauthenticated Remote Code Execution
2024-03-01 16:42:59
trendmicroblog
trendmicroblog
malwarebytes
malwarebytes
Update now! JetBrains TeamCity vulnerability abused at scale
2024-03-08 12:08:35
packetstorm
packetstorm
JetBrains TeamCity Unauthenticated Remote Code Execution
2024-03-14 00:00:00
nvd
nvd
CVE-2024-27199
2024-03-04 18:15:09
CVE-2024-27198
2024-03-04 18:15:09
vulnrichment
vulnrichment
CVE-2024-27198
2024-03-04 17:21:39
CVE-2024-27199
2024-03-04 17:21:40
cisa_kev
cisa_kev
JetBrains TeamCity Authentication Bypass Vulnerability
2024-03-07 00:00:00
cvelist
cvelist
CVE-2024-27199
2024-03-04 17:21:40
CVE-2024-27198
2024-03-04 17:21:39
prion
prion
Path traversal
2024-03-04 18:15:00
Authentication flaw
2024-03-04 18:15:00
cve
cve
CVE-2024-27199
2024-03-04 18:15:09
CVE-2024-27198
2024-03-04 18:15:09
securelist
securelist
Exploits and vulnerabilities in Q1 2024
2024-05-07 10:00:39
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.7
Confidence
Low
EPSS
0.972
Percentile
99.9%
Related for WIZBLOG:5A18101AD798F7961DDC629B4FC1C8FC