CVE-2024-36470

Summary

CVE-2024-36470 is a vulnerability affecting JetBrains TeamCity versions prior to 2022.04.7, 2022.10.6, 2023.05.6, and 2023.11.5. In these versions, an authentication bypass vulnerability was discovered, allowing unauthorized access in specific edge cases. This issue could potentially enable attackers to gain control of TeamCity servers and perform malicious actions, such as modifying build configurations or stealing sensitive data. The vulnerability has since been addressed in the aforementioned software updates, and it is highly recommended that users upgrade to the latest version to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.