WEB JetBrains TeamCity JspPrecompilation Authentication Bypass (CVE-2024-23917)

Rule ID

1234835

Severity

Critical

Description

An authentication bypass vulnerability exists in JetBrains TeamCity. The vulnerability is due to improper authentication of requests of JSP files.

Impact

Remote command execution

Recommendation

Update vendor's patch.

IPS Category

Web threats

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A