Lucene search
CISACISA-KEV-CVE-2024-27198HistoryMar 07, 2024 - 12:00 a.m.
JetBrains TeamCity Authentication Bypass Vulnerability
2024-03-0700:00:00
CISA
www.cisa.gov
21
jetbrains
teamcity
authentication bypass
vulnerability
admin actions
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.1
Confidence
Low
EPSS
0.969
Percentile
99.8%
JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions.
Related
nessus
nessus
JetBrains TeamCity Authentication Bypass (CVE-2024-27198)
2024-03-05 00:00:00
TeamCity Server < 2023.11.4 Multiple Vulnerabilities
2024-03-05 00:00:00
vulnrichment
vulnrichment
CVE-2024-27198
2024-03-04 17:21:39
nvd
nvd
CVE-2024-27198
2024-03-04 18:15:09
githubexploit
githubexploit
thn
thn
TeamCity Flaw Leads to Surge in Ransomware, Cryptomining, and RAT Attacks
2024-03-20 11:26:00
CISA Warns of Actively Exploited JetBrains TeamCity Vulnerability
2024-03-08 06:13:00
Void Banshee APT Exploits Microsoft MHTML Flaw to Spread Atlantida Stealer
2024-07-16 09:00:00
cvelist
cvelist
CVE-2024-27198
2024-03-04 17:21:39
prion
prion
Authentication flaw
2024-03-04 18:15:00
cve
cve
CVE-2024-27198
2024-03-04 18:15:09
attackerkb
attackerkb
CVE-2024-27198
2024-03-04 00:00:00
CVE-2024-27199
2024-03-04 00:00:00
nuclei
nuclei
TeamCity < 2023.11.4 - Authentication Bypass
2024-03-04 20:33:19
TeamCity < 2023.11.4 - Authentication Bypass
2024-03-04 20:18:08
hivepro
hivepro
TeamCity Vulnerabilities Unleash Jasmin Ransomware and More
2024-03-23 02:00:31
Critical Vulnerabilities Discovered in TeamCity, Enable Server Takeover
2024-03-06 17:21:03
Attacks, Vulnerabilities and Actors 4 to 10 March 2024
2024-03-13 07:25:00
rapid7blog
rapid7blog
CVE-2024-27198 and CVE-2024-27199: JetBrains TeamCity Multiple Authentication Bypass Vulnerabilities (FIXED)
2024-03-04 19:17:01
What’s New in Rapid7 Products & Services: Q1 2024 in Review
2024-04-04 13:00:00
Metasploit Wrap-Up 03/15/2024
2024-03-15 18:20:02
wizblog
wizblog
trendmicroblog
trendmicroblog
metasploit
metasploit
JetBrains TeamCity Unauthenticated Remote Code Execution
2024-03-01 16:42:59
malwarebytes
malwarebytes
Update now! JetBrains TeamCity vulnerability abused at scale
2024-03-08 12:08:35
packetstorm
packetstorm
JetBrains TeamCity Unauthenticated Remote Code Execution
2024-03-14 00:00:00
securelist
securelist
Exploits and vulnerabilities in Q1 2024
2024-05-07 10:00:39
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
7.1
Confidence
Low
EPSS
0.969
Percentile
99.8%
Related for CISA-KEV-CVE-2024-27198