CVE-2024-27198

CVE-2024-27198

NVD Published Date: March 04, 2024 at 06:15 PM

NVD Last Modified: May 23, 2024 at 05:57 PM

Download Patch

Vulnerability ID

CVE-2024-27198

Severity

CRITICAL

Severity Score

9.8

Summary

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

References

https://www.jetbrains.com/privacy-security/issues-fixed/

https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive

Mitigation and Patches

-

Exploits

https://github.com/W01fh4cker/CVE-2024-27198-RCE

https://github.com/Chocapikk/CVE-2024-27198

https://github.com/yoryio/CVE-2024-27198

https://github.com/Stuub/RCity-CVE-2024-27198

https://github.com/K3ysTr0K3R/CVE-2024-27198-EXPLOIT

https://github.com/W01fh4cker/CVE-2024-27198-RCE

https://github.com/yoryio/CVE-2024-27198

https://github.com/Chocapikk/CVE-2024-27198

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jetbrains_teamcity_rce_cve_2024_27198.rb

https://github.com/K3ysTr0K3R/CVE-2024-27198-EXPLOIT

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

https://github.com/Stuub/RCity-CVE-2024-27198

https://github.com/Pypi-Project/RCity-CVE-2024-27198

Metasploit Payload

-

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE ID

NVD-CWE-Other

Recent Publish

CVE-2023-48788

CVE-2024-3272

CVE-2024-3273

CVE-2024-32113

CVE-2024-4358

CVE-2024-23692

See SecOps Solution
in action

Schedule Demo

Agentless security for your infrastructure and applications - to build faster, more securely and in a fraction of the operational cost of other solutions