Threat actors actively exploit JetBrains TeamCity flaws to deliver malware
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-23917 | In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible | 9.8 | 54% | ||
CVE-2024-27198+1 related CVE | Authentication Bypass in JetBrains TeamCity CI/CD Server | 9.8 group max | 100% | KEVRansomware | KEV |
From the original article
3 min read at securityaffairs.com
Multiple threat actors are exploiting the recently disclosed JetBrains TeamCity flaw CVE-2024-27198 in attacks in the wild. Trend Micro researchers are exploiting the recently disclosed vulnerabilities CVE-2024-27198 (CVSS score: 9. 8) and CVE-2024-27199 (CVSS score 7.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.