Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Authentication bypass vulnerabilities in TeamCity: everything you need to know

wiz.io | vulnerability | #cloud | #authentication-bypass | #jetbrains | #teamcity | #vulnerability | #cve-2024-27198 | #cve-2024-27199

Summary

JetBrains patches TeamCity authentication bypass flaws—CVE-2024-27198 (CVSS 9.8) and CVE-2024-27199 (CVSS 7.3); unauthenticated attackers can take full control, with exploitation seen in the wild.
Published
Collected

original ↗

Related coverage

  1. CVE-2026-63077: JetBrains TeamCity unauthenticated RCE with public PoC and active exploitation (github.com)
  2. CVE-2022-22947: Spring Cloud Gateway Code Injection Vulnerability (blog.viettelcybersecurity.com)
  3. Behind enemy lines: bug hunting with Burp Infiltrator (portswigger.net)
  4. Off Guard: Breaking LiteLLM from authentication bypass to cloud compromise (wiz.io)
  5. CVE-2024-47076, CVE-2024-47175, CVE-2024-47176, CVE-2024-47177: Everything you need to know (wiz.io)
  6. Wiz Research Finds Critical NVIDIA AI Vulnerability Affecting Containers Using NVIDIA GPUs, Including Over 35% of Cloud Environments (wiz.io)

back