Exploits began within hours of the original disclosure, so patch now
Rapid7 says it reported the two TeamCity vulnerabilities in mid-February, claiming JetBrains soon after suggested releasing patches for the flaws before publicly disclosing them.
Rapid7 claims that after more than a week of radio silence from JetBrains on the coordinated disclosure matter, Rapid7 spotted fresh patches for CVE-2024-27198 and CVE-2024-27199 on Monday, without a published security advisory and without telling the researchers. While JetBrains prepares to tell its side of the story – see the update below – members of the infosec community have"I know from previously working on that team that we tried hard to be friendly and cooperative with vendors. The fact that Rapid7 calls them out on their behavior means it must have been bad.
It's worth noting that CVE-2024-27198 attracts a higher severity score because it could allow attackers to take full administrative control of a TeamCity server and achieve unauthenticated remote code execution. JetBrains says these only affect the on-prem version of TeamCity. Cloud versions are already patched and weren't attacked prior to disclosure.
Deutschland Neuesten Nachrichten, Deutschland Schlagzeilen
Similar News:Sie können auch ähnliche Nachrichten wie diese lesen, die wir aus anderen Nachrichtenquellen gesammelt haben.
The historic gated estate a stone's throw away from city centreThe private estate is hidden in the shadow of Nottingham Castle
Weiterlesen »
England throw away golden opportunity as India secure record win in RajkotWere England too reckless as they succumbed to a massive 434-run hammering at the hands of India in the third Test in Rajkot? And is there still cause for optimism?
Weiterlesen »
Kriss Kyle Takes Us Back to Cappadocia in Turkish DelightCappadocia, Turkey is an unbelievable place as it is. But throw in some mind blowing riding and you have a great edit.
Weiterlesen »
Josie Gibson reacts as Ben Shephard and Cat Deeley made new This Morning hostsJosie Gibson has reacted to the news that Ben Shephard and Cat Deeley are the new permanent hosts on ITV's This Morning, revealing she's going to throw a 'welcome party'
Weiterlesen »
Cheap and cheerful chana masala recipeA real store cupboard favourite, these curried chickpeas are easy to throw together. Serve them with plain rice on their own or with another curry to feed the family. This recipe doubles easily and can be frozen (minus the yoghurt) or kept in the fridge for another meal.
Weiterlesen »
Rapid7 throws JetBrains under the bus for 'uncoordinated vulnerability disclosure'Exploits began within hours of the original disclosure, so patch now
Weiterlesen »