this post was submitted on 08 Mar 2024
16 points (100.0% liked)

Security News

2458 readers
1 users here now

founded 2 years ago
MODERATORS
jerry@infosec.pub
16
JetBrains TeamCity Mass Exploitation Underway, Rogue Accounts Thrive (www.darkreading.com)
submitted 8 months ago by IllNess@infosec.pub to c/securitynews@infosec.pub
0 comments fedilink hide all child comments
 

One of the vulnerabilities (identified as CVE-2024-27198) has a near-maximum severity CVSS rating of 9.8 out of 10 and is an authentication bypass issue in TeamCity's Web component. Researchers from Rapid7 who discovered the vulnerability and reported it to JetBrains have described it as enabling a remote unauthenticated attacker to execute arbitrary code to take complete control of affected instances.

no comments (yet)
sorted by: hot top controversial new old
there doesn't seem to be anything here