Skip to main content

Government officials will never ask you to transfer money or disclose bank log-in details over a phone call.

Call the 24/7 ScamShield Helpline at 1799 if you are unsure if something is a scam.

Cyber Security Agency of Singapore
Alerts

Active Exploitation of Critical Vulnerability in JetBrains TeamCity On-Premises

22 March 2024

JetBrains has released updates addressing a critical vulnerability (CVE-2024-27198) affecting JetBrains TeamCity On-Premises. The vulnerability is reportedly being actively exploited and has a Common Vulnerability Scoring System (CVSSv3) score of 9.8 out of 10.

Successful exploitation of the authentication bypass vulnerability could allow an unauthenticated attacker with HTTP(S) access to a TeamCity server to perform remote code execution and gain administrative control over the compromised server.

The vulnerability affects TeamCity On-Premises versions before 2023.11.4.

Users and administrators of affected products are advised to update to the latest version immediately.

More information is available here:

https://blog.jetbrains.com/teamcity/2024/03/investigating-a-compromised-teamcity-on-premises-server/

Back to top