In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible

Historical exploitation against TeamCity servers by APT groups makes this newest authentication bypass vulnerability an issue we are keeping a close watch on

JetBrains TeamCity version prior to 2023.11.3 suffer from an authentication bypass allowing an unauthenticated attacker to gain administrative control of the TeamCity server via a specially crafted URL.

The version of JetBrains TeamCity installed on the remote host is prior to 2023.11.3. It is, therefore, affected by multiple vulnerabilities:

  - In JetBrains TeamCity before 2023.11.3 path traversal allowed reading data within JAR archives     (CVE-2024-24942)

  - In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible (CVE-2024-23917)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
114290	JetBrains TeamCity < 2023.11.3 Authentication Bypass	Web App Scanning	Component Vulnerability	Check Based	critical
190349	JetBrains TeamCity < 2023.11.3 Multiple Vulnerabilities	Nessus	Misc.	Combined	critical

Detections

Analytics

CVE-2024-23917

critical

Tenable Plugins

critical

critical