# CVE-2024-27198

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

- Page: https://www.vulneraibility.com/cve/CVE-2024-27198
- CVSS: 9.8
- Known exploited: yes, in CISA KEV since 2024-03-07; CISA due date 2024-03-28; known ransomware use
- EPSS: 99.94% (percentile 100.0)
- Public exploit code: 1 on Exploit-DB · 1 Metasploit module · 20 GitHub proofs of concept · 1 Nuclei template (first 2024-03-04)
- CISA SSVC: exploitation active, automatable yes, technical impact total (assessed 2024-03-20)
- Weakness: CWE-288
- Published: 2024-03-04

## Affected versions

- JetBrains TeamCity: affected < 2023.11.4

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] https://www.jetbrains.com/privacy-security/issues-fixed/
- [other] https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-27198

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.