"Rapid7 Discovers Two Critical Authentication Bypass Vulnerabilities in JetBrains TeamCity Server; Fixes Already Implemented by JetBrains

"Rapid7 Discovers Two Critical Authentication Bypass Vulnerabilities in JetBrains TeamCity Server; Fixes Already Implemented by JetBrains - March 2024"

CVE-2024-27198 and CVE-2024-27199: JetBrains TeamCity Multiple Authentication Bypass Vulnerabilities (FIXED)

Last updated at Tue, 05 Mar 2024 14:57:58 GMT Overview In February 2024, Rapid7’s vulnerability research team identified two new vulnerabilities affecting JetBrains TeamCity CI/CD server: CVE-2024-27198 is an authentication bypass vulnerability in the web component of TeamCity that arises from an alternative path issue (CWE-288) and has a CVSS base score of 9.8 (Critical). CVE-2024-27199 is an authentication bypass vulnerability in the web component of TeamCity that arises from a path traversal ...