CVE-2024-23917: Critical severity JetBrains TeamCity vulnerability
Published Feb 6, 2024
·Updated
In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible
Affected Software
24 affected components
JetBrains TeamCity=2017.1
JetBrains TeamCity=2017.2
JetBrains TeamCity=2018.1
JetBrains TeamCity=2018.2
JetBrains TeamCity=2019.1
JetBrains TeamCity=2019.2
JetBrains TeamCity=2020.1
JetBrains TeamCity=2020.2
JetBrains TeamCity=2021.1
JetBrains TeamCity=2021.2
JetBrains TeamCity=2022.1
JetBrains TeamCity=2022.2
JetBrains TeamCity=2023.1
JetBrains TeamCity=2023.2
JetBrains TeamCity=2023.3
JetBrains TeamCity=2023.4
JetBrains TeamCity=2023.5
JetBrains TeamCity=2023.6
JetBrains TeamCity=2023.7
JetBrains TeamCity=2023.8
JetBrains TeamCity=2023.9
JetBrains TeamCity=2023.10
JetBrains TeamCity=2023.11
JetBrains TeamCity<2023.11.3
Event History
Feb 6, 2024
CVE Published
via MITRE·09:21 AM
Data Sourced
via MITRE·09:21 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 AM
DescriptionSeverityWeaknessAffected Software
News Published
via BleepingComputer·05:30 PM
News Published
via BleepingComputer·05:31 PM
Feb 7, 2024
News Published
via The Register·12:33 PM
News Published
via The Register·12:36 PM
Mar 7, 2024
News Published
via Dark Reading·10:51 PM
Dec 20, 2024
News Published
via Dark Reading·12:00 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-23917?
CVE-2024-23917 is classified as a critical vulnerability due to its potential for authentication bypass leading to remote code execution.
2
How do I fix CVE-2024-23917?
To fix CVE-2024-23917, users should upgrade to JetBrains TeamCity version 2023.11.3 or later.
3
Which versions of JetBrains TeamCity are affected by CVE-2024-23917?
CVE-2024-23917 affects JetBrains TeamCity versions 2017.1 through 2023.11.
4
What type of vulnerability is CVE-2024-23917?
CVE-2024-23917 is an authentication bypass vulnerability that can lead to remote code execution.
5
Who is the vendor associated with CVE-2024-23917?
The vendor associated with CVE-2024-23917 is JetBrains, the developer of TeamCity.