Detections
Analytics
CVE-2024-27198
critical
Description
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible
From the Tenable Blog
CVE-2024-27198, CVE-2024-27199: Two Authentication Bypass Vulnerabilities in JetBrains TeamCity
Published: 2024-03-06
Two vulnerabilities with publicly available exploit code in JetBrains TeamCity on-premises software could result in attackers bypassing authentication and achieving code execution.
References
https://thehackernews.com/2026/08/china-linked-hackers-deploy-new.html
https://thehackernews.com/2026/04/cisa-adds-8-exploited-flaws-to-kev-sets.html
https://hackread.com/storm-1175-hackers-24-hour-medusa-ransomware-flaw/
https://www.darkreading.com/threat-intelligence/storm-1175-medusa-ransomware-high-velocity
https://thehackernews.com/2026/04/china-linked-storm-1175-exploits-zero.html
https://cybelangel.com/blog/qilin-ransomware-tactics-attack/
https://thehackernews.com/2025/05/china-linked-hackers-exploit-sap-and.html
https://www.securityweek.com/chinese-hacking-group-earth-lamia-targets-multiple-industries/
https://www.trendmicro.com/en_us/research/25/e/earth-lamia.html
https://securelist.com/vulnerability-report-q1-2024/112554/
https://thehackernews.com/2024/03/bianlian-threat-actors-exploiting.html
https://www.guidepointsecurity.com/blog/bianlian-gos-for-powershell-after-teamcity-exploitation/
https://www.theregister.com/2024/03/07/teamcity_exploits_lead_to_ransomware/
https://github.com/chengbochuan3/CVE-CICD-Security
https://github.com/Het-Kalariya/CVEs
https://github.com/abiral-timalsina/Cyber-Defenders-lab-
https://github.com/hhhell/CVE-Vulnerability-Reproduction
https://github.com/kxom9ks/CVE-2024-27198-TeamCity
https://github.com/kxom9ks/CVE-2024-27198
https://github.com/ykrishhh/cve-pocs
https://github.com/Security-Phoenix-demo/blue-cve-intelligence-mcp-cli
https://github.com/BilalAlshiekh912/Incident-Response-Report-TeamCity-Compromise-CVE-2024-27198-
https://github.com/ptd200110/CVE-2024-27198-SOC-Lab
https://github.com/1392081456/sigma-detection-rules
https://github.com/exploitintel/eip-search
https://github.com/h0mi3e/THANOS
https://github.com/Ne0zer01/CVE-2024-27198_LAB
https://github.com/cmpnn-romain/CVE-2024-27198_Lab
https://github.com/1392081456/ctf-notes
https://github.com/ChovTheHacker/EREBUS
https://github.com/dbwlsdnr95/CVE-Research
https://github.com/hermestoola/bb-hunter-pro
https://github.com/dbwlsdnr95/CVE-2024-27198
https://github.com/donghass/CVE-Vulnerability-analysis-reports
https://github.com/seol1013/CVE
https://github.com/EynaExp/CVE-2024-27198-POC
https://github.com/systemBoam-KU-AICS306-25Fall/cve-intel-agent
https://github.com/hajarek24/CityCVE
https://github.com/lebathang/CveCli
https://github.com/christopher-deriv/cve_analyzer
https://github.com/ArtemCyberLab/Project-Exploiting-CVE-2024-27198-RCE-Vulnerability
https://github.com/dkhacks/CVE_2024_27198
https://github.com/Pypi-Project/RCity-CVE-2024-27198
https://github.com/HPT-Intern-Task-Submission/CVE-2024-27198
https://github.com/ShadowByte1/CVES
https://github.com/Stuub/RCity-CVE-2024-27198
https://github.com/W01fh4cker/CVE-2024-27198-RCE
https://github.com/yoryio/CVE-2024-27198
https://www.jetbrains.com/privacy-security/issues-fixed/
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-27198
Details
Published: 2024-03-04
Updated: 2025-10-24
Known Exploited Vulnerability (KEV)
Risk Information
CVSS v2
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Severity: Critical
CVSS v3
Base Score: 9.8
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: Critical
EPSS
EPSS: 0.99938
Vulnerability Watch
Tenable Research has classified this CVE under the following Vulnerability Watch classification, which includes active and historical (inactive) classifications. You can learn more about these classifications on our blog.
Vulnerability of Interest