---
id: 7195
title: "Authentication bypass vulnerabilities in TeamCity: everything you need to know"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/jetbrains-teamcity-authentication-bypass-vulnerabilities-cve-2024-27198-cve-2024-27199"
published_at: "2024-03-06T16:49:16Z"
tags: ["cloud", "authentication-bypass", "jetbrains", "teamcity", "vulnerability", "cve-2024-27198", "cve-2024-27199"]
phying_url: "https://phying.com/item/7195"
lang: en
---

# Authentication bypass vulnerabilities in TeamCity: everything you need to know

## Summary

JetBrains patches TeamCity authentication bypass flaws—CVE-2024-27198 (CVSS 9.8) and CVE-2024-27199 (CVSS 7.3); unauthenticated attackers can take full control, with exploitation seen in the wild.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2024-03-06T16:49:16Z
- **Original:** https://www.wiz.io/blog/jetbrains-teamcity-authentication-bypass-vulnerabilities-cve-2024-27198-cve-2024-27199
- **Phying News:** https://phying.com/item/7195