Mar 4, 2024
1 new incident, 1 with updates.
Started
- ClosedPatched
JetBrains TeamCity on-prem auth bypass (CVE-2024-27198) exploited
JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions. Added to the CISA KEV catalog on 2024-03-07. CISA lists known use in ransomware campaigns.
JetBrains TeamCityClosed Mar 7, 2024
Updated
- ClosedPatched
Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control
Microsoft Windows Kernel contains an exposed IOCTL with insufficient access control vulnerability within the IOCTL (input and output control) dispatcher in appid.sys that allows a local attacker to achieve privilege escalation. Added to the CISA KEV catalog on 2024-03-04. CISA lists known use in ransomware campaigns.
Microsoft WindowsClosed Mar 4, 2024
