Are we missing a cpe here Monitor the network for evidence of encoded commands and execution of network scanning tools. On september 21, 2023, jetbrains publicly disclosed a critical security vulnerability with their ci/cd platform teamcity It was given a cvss of 9.8 for the potential of bypassing authentication leading to a remote code execution (rce) attack. In jetbrains teamcity before 2023.05.4 authentication bypass leading to rce on teamcity server was possible This issue is known to have been leveraged as part of a ransomware campaign
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
OPEN
