Type Vulnerability
JetBrains TeamCity contains a relative path traversal vulnerability that could allow limited admin actions to be performed. Known-exploited catalogue reports exploitation in the wild.
JetBrains · Auth bypass
JetBrains TeamCity Authentication Bypass Vulnerability
CVE-2024-27198
What this means
This is rated critical severity (9.8 out of 10). It is on the known-exploited catalogue, which means attacks using it have already been seen. Ask IT whether Jetbrains Teamcity is in your estate, and treat that as the priority.
Full vendor description
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
Scoring and exploitation
9.8/ 10
CVSS 3.1 base scoreCritical
Exploitable over the network without any account, and no one has to click or open anything. High impact on confidentiality, integrity and availability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability
Longer bar: easier to attack
Attack vectorNetworkAV:N
Attack complexityLowAC:L
Privileges requiredNonePR:N
User interactionNoneUI:N
ScopeUnchangedS:U
Impact
Longer bar: more harm
ConfidentialityHighC:H
IntegrityHighI:H
AvailabilityHighA:H
- Elevated attack likelihood (~99.9% in 30 days)Model estimate (): a probability signal, not confirmed exploitation
- Exploited in the wild
- Yes — confirmed exploitation (US CISA )
- Known
- Listed product
- JetBrains TeamCity
Weaknesses
CWE-288NVD-CWE-Other
Affected products ()
- Jetbrains Teamcity
Show the raw CPE strings (1)
- cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*
References
5 links from the CVE record, grouped by site; the vendor's advisory comes first.
jetbrains.com1 linkVendor advisory
- issues-fixed (opens in a new tab)Vendor Advisory
darkreading.com1 link
- jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive (opens in a new tab)Press/Media Coverage · Third Party Advisory
cisa.gov1 link
- known-exploited-vulnerabilities-catalog (opens in a new tab)US Government Resource