In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HJetbrains Teamcity
APPJetbrains< 2023.05.4
CISA KEV — detailsi
- Vendori
- JetBrains ↗
- Producti
- TeamCity
- Added to KEVi
- October 4, 2023
- Remediation deadline (US Federal)i
- October 25, 2023(overdue)
- Ransomwarei
- Active ransomware campaigns exploit this vulnerability
Required action (CISA)i
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA descriptioni
JetBrains TeamCity contains an authentication bypass vulnerability that allows for remote code execution on TeamCity Server.
🔴
IMMEDIATE ACTION
Actively exploited in the wild (CISA KEV). Patch immediately.
☠️WYKORZYSTYWANE W RANSOMWARE⏰CISA DEADLINE: 25 października 2023
Tags
Auth BypassCI/CD
References
Related vulnerabilities
CVE-2026-63077CRITICAL9.8⚠ KEVPL ✓same product
RCE bez uwierzytelnienia w JetBrains TeamCity przez protokół agent polling
CVE-2024-27198CRITICAL9.8⚠ KEVPL ✓same product
JetBrains TeamCity — Authentication Bypass umożliwiający działania administracyjne
CVE-2024-23917CRITICAL9.8PL ✓same product
JetBrains TeamCity: Authentication Bypass umożliwiający RCE
CVE-2023-34218CRITICAL9.1PL ✓same product
JetBrains TeamCity — obejście kontroli uprawnień umożliwiające akcje administratora
CVE-2022-24331CRITICAL9.8PL ✓same product
JetBrains TeamCity — podszywanie się pod użytkownika GitLab przy uwierzytelnianiu