JetBrains TeamCity: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• Critical 9.8
  CVE-2024-27198 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

  JetBrains TeamCity
  Mar 4, 2024

  KEV Mar 7, 2024
• High 7.3
  CVE-2024-27199 Exploited · Ransomware Scanner template EPSS 100%

  In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible

  JetBrains TeamCity
  Mar 4, 2024

  KEV Apr 20, 2026

Revision history

1. 2026-04-20 #2

   Aktive Ausnutzung gemeldet

2. 2024-03-04 #1

   Initiale Fassung

References

• JetBrains Fixed security issues vom 2024-03-04
  https://www.jetbrains.com/privacy-security/issues-fixed/
• GitHub Advisory Database vom 2024-03-04
  https://github.com/advisories/GHSA-xh94-49wq-7h2h
• GitHub Advisory Database vom 2024-03-04
  https://github.com/advisories/GHSA-m7gg-q7qj-3r2r
• Rapid7 Report
  https://www.rapid7.com/blog/post/2024/03/04/etr-cve-2024-27198-and-cve-2024-27199-jetbrains-teamcity-multiple-authentication-bypass-vulnerabilities-fixed/
• CISA Known Exploited Vulnerabilities Catalog vom 2026-04-20
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog