CISA Warns of Actively Exploited JetBrains TeamCity Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting JetBrains TeamCity On-Premises software to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.
The vulnerability, tracked as CVE-2024-27198 (CVSS score: 9.8), refers to an authentication bypass bug that allows for a complete

actively exploited agency authentication authentication bypass bug bypass catalog cisa critical cve cvss cvss score cybersecurity exploitation exploited exploited vulnerabilities flaw infrastructure infrastructure security jetbrains jetbrains teamcity kev known exploited known exploited vulnerabilities score security security flaw software teamcity vulnerabilities vulnerability