VulnerabilitycriticalExploited in the wild

Critical JetBrains TeamCity On-Premises Flaws Could Lead to Server Takeovers

The Hacker Newsby @TheHackersNewsMar 5, 2024 · 03:34 UTC (Mar 5, 2024)2 min read3 · 1 read

Read at thehackernews.com

Analyze CVE-2024-27198 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-27198 CVE-2024-27199 CVE-2024-23917

Tags: cve-2024-27198 cve-2024-27199 cve-2024-23917 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-23917	In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible	9.8	54%		Feb 6, 2024
CVE-2024-27198 +1 related CVE CVE-2024-27199	Authentication Bypass in JetBrains TeamCity CI/CD Server	9.8 group max	100%	KEVRansomware	Mar 4, 2024 KEV Mar 7, 2024

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Mar 05, 2024 Vulnerability / Network Security A new pair of security vulnerabilities have been disclosed in JetBrains TeamCity On-Premises software that could be exploited by a threat actor to take control of affected systems. The flaws, tracked as CVE-2024-27198 (CVSS score: 9. 8) and CVE-2024-27199 (CVSS score: 7.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.