CVEブラウザに戻る

CVE-2024-27198

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-03-04

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible

Affected Platforms (CPE)

📦

Jetbrains

Teamcity

< 2023.11.4

References & Advisories

🔗 https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive

🔗 https://www.jetbrains.com/privacy-security/issues-fixed/

🔗 https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive

🔗 https://www.jetbrains.com/privacy-security/issues-fixed/

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-27198

関連するセキュリティ記事

グローバル・サイバーインテリジェンス・ダイジェスト：2026年7月24日

本号では、Check Point CVE-2026-16232 SmartConsole 認証回避の悪用状況、ロシア背景の LAUNDRY BEAR による Zimbra 脆弱性攻撃、偽 Claude Desktop 悪意広告キャンペーン、および Chaos ランサムウェアの最新動向を分析します。

関連する脆弱性情報

CVE-2026-597968.1

In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks

CVE-2026-597958.1

In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible

CVE-2026-597947.3

In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page was possible via agent-reported data

CVE-2026-597938.8

In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration