CVE Vulnerabilities

CVE-2024-23917

Authentication Bypass Using an Alternate Path or Channel

Published: Feb 06, 2024 | Modified: Nov 21, 2024
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible

Weakness

The product requires authentication, but the product has an alternate path or channel that does not require authentication.

Affected Software

NameVendorStart VersionEnd Version
TeamcityJetbrains*2023.11.3 (excluding)

Potential Mitigations

References