PT-2023-8748 · Jetbrains · Jetbrains Teamcity+1

Published 2023-03-04 · Updated 2026-06-01 · CVE-2024-27198

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2023.11.4

Description JetBrains TeamCity contains an authentication bypass issue due to an alternative path vulnerability. Successful exploitation allows an unauthenticated attacker to perform any action, including creating a user with system administrator privileges. Publicly available exploits exist. This vulnerability has been actively exploited in the wild, with reports of ransomware attacks and DDoS activity. The vulnerability allows attackers to bypass authentication checks and gain administrative access to the server. The payload for exploitation involves a specific request: /hax?jsp=/app/rest/server;.jsp. APT29 has been observed exploiting this vulnerability.

Recommendations Update JetBrains TeamCity to version 2023.11.4 or later.

Exploit

Fix

RCE

Authentication Bypass Using an Alternate Path or Channel

Relative Path Traversal

Weakness Enumeration

CWE-288

CWE-23

Related Identifiers

BDU:2024-01792

BDU:2024-02014

CVE-2024-27198

Affected Products

Jetbrains Teamcity

Teamcity

References · 231

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jetbrains_teamcity_rce_cve_2024_27198.rb · Exploit
• 🔥 https://github.com/W01fh4cker/CVE-2024-27198-RCE · Exploit
• 🔥 https://github.com/Chocapikk/CVE-2024-27198 · Exploit
• 🔥 https://github.com/yoryio/CVE-2024-27198 · Exploit
• 🔥 https://github.com/Stuub/RCity-CVE-2024-27198 · Exploit
• 🔥 https://github.com/K3ysTr0K3R/CVE-2024-27198-EXPLOIT · Exploit
• 🔥 https://github.com/geniuszlyy/CVE-2024-27198 · Exploit
• 🔥 https://github.com/geniuszly/CVE-2024-27198 · Exploit
• 🔥❌ https://github.com/tucommenceapousser/CVE-2024-27198?ysclid=lte40g882k59437349 · Exploit, Deleted
• 🔥❌ https://github.com/Pypi-Project/RCity-CVE-2024-27198 · Exploit, Deleted
• 🔥 https://exploit-db.com/exploits/52411 · Exploit
• https://osv.dev/vulnerability/CVE-2024-27198 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/705662 · Security Note
• https://jetbrains.com/privacy-security/issues-fixed · Vendor Advisory
• https://jetbrains.com/help/teamcity/teamcity-2023-11-4-release-notes.html · Security Note