CVE-2024-36470
published 2024-05-29CVE-2024-36470: In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 authentication bypass was possible in specific edge cases
PriorityP355critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.46%
36.9th percentile
In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 authentication bypass was possible in specific edge cases
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| jetbrains | teamcity | < 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 | 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5 |
| jetbrains | teamcity | < 2022.04.7 | 2022.04.7 |
| jetbrains | teamcity | >= 2022.10 < 2022.10.6 | 2022.10.6 |
| jetbrains | teamcity | >= 2023.05 < 2023.05.6 | 2023.05.6 |
| jetbrains | teamcity | >= 2023.11 < 2023.11.5 | 2023.11.5 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No advisories linked to this vulnerability.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-05-29
Published