- Description
- In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
- Source
- cve@jetbrains.com
- NVD status
- Analyzed
- Products
- teamcity
CVSS 3.1
- Type
- Primary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
Data from CISA
- Vulnerability name
- JetBrains TeamCity Authentication Bypass Vulnerability
- Exploit added on
- Mar 7, 2024
- Exploit action due
- Mar 28, 2024
- Required action
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
- cve@jetbrains.com
- CWE-288
- nvd@nist.gov
- NVD-CWE-Other
- Hype score
- Not currently trending
CI/CD COMPROMISE. We break down the catastrophic TeamCity Authentication Bypass (CVE-2024-27198), which allows unauthenticated access to your core build and deployment environment. This is the definition of a supply chain threat. Read the full report on - https://t.co/MPnHlqGhZU
@cyberbivash
29 Sept 2025
3 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Exploited TeamCity 2023.11.3 via CVE-2024-27198 auth bypass to gain RCE using Metasploit-delivered malicious plugin. Splunk used for forensic analysis revealing backdoor user and malicious activities. #TeamCityExploits #SplunkAnalysis https://t.co/1jsee1wgFm
@TweetThreatNews
29 Sept 2025
41 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Alert Background: Some of the key vulnerabilities they have exploited include CVE-2017-9805 (Apache Struts), CVE-2021-22205 (GitLab), CVE-2024-9047 (WordPress), CVE-2024-27198 and CVE-2024-27199 (TeamCity), CVE-2024-51378 and CVE-2024-51567 (CyberPanel) https://t.co/dSfmGWyicJ
@KootekSecurity
31 May 2025
82 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
Investigating APT29 Exploiting TeamCity CVE-2024-27198 https://t.co/QVotkQvqQh #APT29 #CyberSecurity #TeamCity #CVE202427198 #ThreatIntelligence
@MokraniMoustafa
8 Mar 2025
49 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Actively exploited CVE : CVE-2024-27198
@transilienceai
1 Mar 2025
10 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
Great post with investigation of nation state actor APT29 Exploiting TeamCity CVE-2024-27198APT29 Exploiting TeamCity CVE-2024-27198 https://t.co/emhHZSHkhm
@OvidiuPismac
24 Feb 2025
21 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*",
"matchCriteriaId": "66B25AF5-F103-4A5C-8A39-901357131404",
"versionEndExcluding": "2023.11.4",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]