Forum Discussion
CVE-2024-27198, CVE-2024-27199: Two Authentication Bypass...
CVE-2024-27198, CVE-2024-27199: Two Authentication Bypass Vulnerabilities in JetBrains TeamCity
On March 4, JetBrains disclosed two zero-day vulnerabilities in its TeamCity products:
According to JetBrains, these issues were disclosed to them by researchers who discovered them in February. CVE-2024-27918 is an authentication bypass vulnerability and could allow an unauthenticated attacker to take administrative control of an affected TeamCity server. CVE-2024-27199 is also an authentication bypass vulnerability, and could allow unauthenticated attackers to traverse the file system to access files and directories outside of the restricted directory.
For more information about these vulnerabilities, including the availability of patches and Tenable product coverage, please visit our blog.
