CVSS: 4.2EPSS: 0%CPEs: 1EXPL: 0CVE-2024-29880
https://notcve.org/view.php?id=CVE-2024-29880
In JetBrains TeamCity before 2023.11 users with access to the agent machine might obtain permissions of the user running the agent process En JetBrains TeamCity antes de 2023.11, los usuarios con acceso a la máquina del agente podían obtener permisos del usuario que ejecuta el proceso del agente. • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-749: Exposed Dangerous Method or Function •
CVSS: 5.8EPSS: 0%CPEs: 1EXPL: 0CVE-2024-28174
https://notcve.org/view.php?id=CVE-2024-28174
In JetBrains TeamCity before 2023.11.4 presigned URL generation requests in S3 Artifact Storage plugin were authorized improperly En JetBrains TeamCity antes de 2023.11.4, las solicitudes de generación de URL prefirmadas en el complemento S3 Artifact Storage no se autorizaban correctamente • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-863: Incorrect Authorization •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-28173
https://notcve.org/view.php?id=CVE-2024-28173
In JetBrains TeamCity between 2023.11 and 2023.11.4 custom build parameters of the "password" type could be disclosed En JetBrains TeamCity entre 2023.11 y 2023.11.4 se podrían revelar parámetros de compilación personalizados del tipo "contraseña" • https://www.jetbrains.com/privacy-security/issues-fixed • CWE-201: Insertion of Sensitive Information Into Sent Data •
CVSS: 7.3EPSS: 1%CPEs: 1EXPL: 1CVE-2024-27199
https://notcve.org/view.php?id=CVE-2024-27199
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible En JetBrains TeamCity antes de 2023.11.4 era posible un path traversal permitiendo realizar acciones administrativas limitadas • https://github.com/W01fh4cker/CVE-2024-27198-RCE https://www.darkreading.com/cyberattacks-data-breaches/jetbrains-teamcity-mass-exploitation-underway-rogue-accounts-thrive https://www.jetbrains.com/privacy-security/issues-fixed • CWE-23: Relative Path Traversal •
CVSS: 9.8EPSS: 97%CPEs: 1EXPL: 12CVE-2024-27198 – JetBrains TeamCity Authentication Bypass Vulnerability
https://notcve.org/view.php?id=CVE-2024-27198
In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions was possible En JetBrains TeamCity antes de 2023.11.4 era posible omitir la autenticación permitiendo realizar acciones administrativas JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions. • https://github.com/W01fh4cker/CVE-2024-27198-RCE https://github.com/yoryio/CVE-2024-27198 https://github.com/K3ysTr0K3R/CVE-2024-27198-EXPLOIT https://github.com/Chocapikk/CVE-2024-27198 https://github.com/Stuub/RCity-CVE-2024-27198 https://github.com/jrbH4CK/CVE-2024-27198 https://github.com/rampantspark/CVE-2024-27198 https://github.com/HPT-Intern-Task-Submission/CVE-2024-27198 https://github.com/CharonDefalt/CVE-2024-27198-RCE https://github.com/passwa11/CVE-2024-27198 • CWE-288: Authentication Bypass Using an Alternate Path or Channel •