{"id":"CVE-2024-23917","published":"2024-02-06T09:21:31Z","modified":"2024-08-01T23:13:08Z","title":"In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible","vendor":"JetBrains","product":"TeamCity","tier":"core","eol":null,"affectedVersions":[{"vendor":"JetBrains","product":"TeamCity","versions":["< 2023.11.3"]}],"description":{"text":"In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible","provenance":"source","from":"CVE.org"},"summary":{"text":"JetBrains TeamCity versions before 2023.11.3 contain an authentication bypass flaw in the server's request handling. An attacker with network access to the TeamCity server can exploit it without credentials or user interaction to gain remote code execution.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-31T05:10:28Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.54009,"percentile":0.99002,"date":"2026-10-30","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2025-10-17","exploitedFirstSeen":null,"ransomware":false,"evidence":[],"evidenceTotal":0,"provenance":"source"},"exploited":true,"otx":{"pulseCount":1,"pulses":[{"name":"Exploitation of Confluence Server Vulnerability CVE-2023-22527 Leading to C3RB3R Ransomware - Arctic Wolf","url":"https://otx.alienvault.com/pulse/65ca18252498f80961da5250","created":"2024-02-12"}],"provenance":"machine"},"cwes":[{"id":"CWE-288","name":"Authentication Bypass Using an Alternate Path or Channel"}],"references":[{"url":"https://www.jetbrains.com/privacy-security/issues-fixed/","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2024-21347","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-21347","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"nuclei":[{"id":"CVE-2024-23917","name":"JetBrains TeamCity > 2023.11.3 - Authentication Bypass","severity":"critical","path":"http/cves/2024/CVE-2024-23917.yaml","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-23917.yaml"}],"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2024-02-06","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2024-23917","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":67.3,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 379 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.8,"detail":"percentile 0.9900"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 nuclei template"},{"name":"Mentioned in OTX pulses","points":0.68,"detail":"1 pulse"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}