Description
JetBrains TeamCity 是面向开发人员和 DevOps 工程师的强大的持续集成和部署工具。 JetBrains TeamCity 2023.11.3之前版本存在认证绕过漏洞，攻击者可获取系统管理员权限和敏感信息。
JetBrains TeamCity 认证绕过漏洞（CVE-2024-23917）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://blog.jetbrains.com/teamcity/2024/02/critical-security-issue-affecting-teamcity-on-premises-cve-2024-23917/
https://nvd.nist.gov/vuln/detail/CVE-2024-23917
https://cloud.tencent.com/developer/article/2429447
https://rivers.chaitin.cn/blog/cq956np0lnechd244tf0
https://avd.aliyun.com/detail?id=AVD-2024-23917
https://cn-sec.com/archives/2852518.html
https://blog.csdn.net/2401_83799022/article/details/137039098
https://www.buaq.net/go-276475.html
https://www.sentinelone.com/vulnerability-database/cve-2024-23917/
https://censys.com/advisory/cve-2024-23917/
https://blog.0daylabs.com/2024/05/27/jetbrains-teamcity-auth-bypass/
https://www.bleepingcomputer.com/news/security/jetbrains-warns-of-new-teamcity-auth-bypass-vulnerability/
https://www.rapid7.com/db/vulnerabilities/jetbrains-teamcity-cve-2024-23917/
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-23917.yaml
https://hivepro.com/threat-advisory/jetbrains-teamcity-authentication-bypass-flaw-paving-the-way-for-server-takeover/