The Patches & Perils Of Coordinated Vulnerability Disclosure | Lessons To Learn From The Rapid7/Jet Brains Kerfuffle | Grey Noise Labs Storm⚡️Watch
Summary: Rapid7 disclosed two critical TeamCity CI/CD vulnerabilities to JetBrains on February 20, 2024, including CVE-2024-27198, which allows a complete authentication bypass enabling administrative actions on the server and its host environment. JetBrains called the disclosure uncoordinated, arguing that Rapid7's immediate release of exploit examples let attackers of any skill level exploit the flaws, and the dispute was followed by a "land-rush like assault" from threat groups using ransomware for initial access.
What you should know: The disagreement between the two vendors did not slow anyone down: exploit examples were public and threat groups moved in with ransomware, so the window between disclosure and initial access closed fast for every unpatched TeamCity server.
Read the original at GreyNoise Blog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2024-27198CVE-2024-27199
- Related
- CVE-2024-27199: Jet Brains Team City Relative Path Traversal Vulnerability Known Exploited Vulnerabilities · Apr 20, 2026CVE-2024-27198: Jet Brains Team City Authentication Bypass Vulnerability Known Exploited Vulnerabilities · Mar 07, 2024Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026