High · 7.4 CVE-2024-31136 EUVD-2024-29047GHSA-2fjx-8hxj-4456

In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter

Published Mar 28, 2024 · Updated Aug 2, 2024 · Assigned by JetBrains

Vendor: JetBrains Product: TeamCity

Description

In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter

Affected products

Vendor	Product	Affected	Fixed
JetBrains	TeamCity	< 2024.03	2024.03

Advisories 2

WID-SEC-2024-0756 JetBrains TeamCity: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 27, 2024
WID-SEC-2024-1254 JetBrains TeamCity: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 30, 2024

References

https://www.jetbrains.com/privacy-security/issues-fixed/