{"cvss":9.8,"datePublished":"2024-03-07","dateUpdated":"2024-03-07","description":"JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions.","dueDate":"2024-03-28","id":"CVE-2024-27198","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Known","notes":"https://www.jetbrains.com/help/teamcity/teamcity-2023-11-4-release-notes.html; https://blog.jetbrains.com/teamcity/2024/03/additional-critical-security-issues-affecting-teamcity-on-premises-cve-2024-27198-and-cve-2024-27199-update-to-2023-11-4-now/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-27198","product":"TeamCity","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"CRITICAL","source":"cisa_known_exploited","title":"JetBrains TeamCity Authentication Bypass Vulnerability","vendor":"JetBrains"}