Exploit for Authentication Bypass Using an Alternate Path or Channel in Jetbrains Teamcity CVE-2024-27198 CVE-2024-27199

## https://sploitus.com/exploit?id=54025D84-9B99-508F-9952-2EC5E37CECED
# CVE-2024-27198

this is a simple exploit to leverage CVE on TeamCity 2023.11.3 and below.

## What is the vuln about ?

auth bypass, allows you to get admin easily. (Remote Code as a service!)

## References

- https://www.rapid7.com/blog/post/2024/03/04/etr-cve-2024-27198-and-cve-2024-27199-jetbrains-teamcity-multiple-authentication-bypass-vulnerabilities-fixed/
- https://nvd.nist.gov/vuln/detail/CVE-2024-27198