CVE-2024-27198
JetBrains TeamCity Authentication Bypass Vulnerability
Published Mar 4, 2024 · updated Jun 17, 2026 · jetbrains teamcity
JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions.
Timeline
Detection, updates, and resolution for this record.
Mar 4, 2024 · Catalog
Detected
JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions.
Mar 7, 2024 · CISA KEV
Known exploited
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Mar 28, 2024 · CISA KEV
Remediation due
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Jun 17, 2026 · Catalog
Updated
JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA due date Mar 28, 2024
Affected
- cpe jetbrains/teamcityversion unspecified
- vendor JetBrains TeamCityversion unspecified
Sources
- CISA KEVCVE-2024-27198
JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions.
cisa.gov - CVE.orgCVE-2024-27198
Official CVE identifier
cve.org - FIRST EPSSCVE-2024-27198
30-day exploitation probability 99.9%
first.org - Exploit Database52411
Public archive entry. The exploit body is not stored here.
exploit-db.com - Metasploit Modulesexploit_multi/http/jetbrains_teamcity_rce_cve_2024_27198
Public module reference (excellent). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2024-27198
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
nvd.nist.gov