JetBrains TeamCity Authentication Bypass Vulnerabilities (CVE-2024-27198, CVE-2024-27199)

What are the Vulnerabilities?

Two new vulnerabilities affecting JetBrains TeamCity CI/CD server have been identified and tagged as CVE-2024-27198 and CVE-2024-27199. The most severe of the two, CVE-2024-27198, has been added to CISA's known exploited catalog which allows for a complete compromise of a vulnerable TeamCity server by a remote unauthenticated attacker.

What is the Vendor Solution?


On March 3, 2024, JetBrains released TeamCity 2023.11.4 to fix both CVE-2024-27198 and CVE-2024-27199. [ Link ]


What FortiGuard Coverage is available?

FortiGuard …

attacker authentication authentication bypass bypass catalog cisa compromise cve cve-2024-27198 cve-2024-27199 exploited jetbrains jetbrains teamcity known exploited server teamcity unauthenticated vulnerabilities vulnerable