CyberCureME - Cyber Security Marketplace’s Post

Critical vulnerabilities in TeamCity JetBrains fixed, release of technical details imminent, patch quickly! (CVE-2024-27198, CVE-2024-27199): JetBrains has fixed two critical security vulnerabilities (CVE-2024-27198, CVE-2024-27199) affecting TeamCity On-Premises and is urging customers to patch them immediately. “Rapid7 originally identified and reported these vulnerabilities to us and has chosen to adhere strictly to its own vulnerability disclosure policy. This means that their team will publish full technical details of these vulnerabilities and their replication steps within 24 hours of this notice,” the company stated today. This also means that proof-of-concept and full … More → The post Critical vulnerabilities in TeamCity JetBrains fixed, release of technical details imminent, patch quickly! (CVE-2024-27198, CVE-2024-27199) appeared first on Help Net Security. @Poseidon-US #HelpNetSecurity #Cybersecurity

Critical vulnerabilities in TeamCity JetBrains fixed, release of technical details imminent, patch quickly! (CVE-2024-27198, CVE-2024-27199): JetBrains has fixed two critical security vulnerabilities (CVE-2024-27198, CVE-2024-27199) affecting TeamCity On-Premises and is urging customers to patch them immediately. “Rapid7 originally identified and reported these vulnerabilities to us and has chosen to adhere strictly to its own vulnerability disclosure policy. This means that their team will publish full technical details of these vulnerabilities and their replication steps within 24 hours of this notice,” the company stated today. This also means that proof-of-concept and full … More → The post Critical vulnerabilities in TeamCity JetBrains fixed, release of technical details imminent, patch quickly! (CVE-2024-27198, CVE-2024-27199) appeared first on Help Net Security. #HelpNetSecurity #Cybersecurity

Snyk's Security Labs recently unveiled four vulnerabilities affecting core container ecosystem components that could lead to serious security breaches. For a summary of the vulnerabilities, check out their detailed blog post, “Leaky Vessels: Container Breakout Vulnerabilities” here: https://lnkd.in/dzGJ5nVh You can also join #Snyk's webinar on Tuesday, February 6th at 11 AM ET to learn more about the #LeakyVessels vulnerability: https://lnkd.in/dFaUmVZG This session, hosted by technical experts, will provide an in-depth technical review of one of the Leaky Vessels vulnerabilities, what caused it, how it can be exploited, and, most importantly, how it can be mitigated through upgrades and monitoring.

🚨 BREAKING🚨 The Snyk Security Labs team has identified four critical/high-severity vulnerabilities (#LeakyVessels) affecting core container ecosystem components, which can allow container breakouts. For more information about the vulnerabilities, including a full technical breakdown and mitigation details, and the latest updates, read the recent blog post. Join Snyk technical experts on February 6th at 11 am ET as they provide an in-depth technical review of one of the Leaky Vessels vulnerabilities, what caused it, how it can be exploited, and, most importantly, how it can be mitigated through upgrades and monitoring. (Registration link in comments) Please feel free to reach out to me if you'd like to discuss more on this.

🚀 Security, Speed, and 95% Fewer Vulnerabilities? Yes, please! We’ve cracked the code to container security in just 3 easy steps: 1️⃣ Start with RF Curated Near Zero CVE images 2️⃣ Instrument & Profile 3️⃣ Harden & Defend Check out our latest blog to see how RapidFort can help you stay ahead of the curve. 🔍 https://lnkd.in/eCkTNxr5 #NearZeroCVE #containersecurity #curatedimages #softwarevulnerabilities

The headline is a bit alarmist, but a good time to remind you to: ▶️ review the required patches ▶️ perform your risk assessment ▶️ test your patches in a controlled environment ▶️ then roll out across the network It's important to note that just because a patch is not critical or important doesn't mean that I doesn't need to be installed. Many exploits are chained that take advantage of lower risk vulnerabilities first then escalate the attack. https://lnkd.in/eNve_eF6

CVE-2024-27198 and CVE-2024-27199: JetBrains TeamCity Multiple Authentication Bypass Vulnerabilities -CVE-2024-27198 is an authentication bypass vulnerability in the web component of TeamCity that arises from an alternative path issue (CWE-288) and has a CVSS base score of 9.8 (Critical). -CVE-2024-27199 is an authentication bypass vulnerability in the web component of TeamCity that arises from a path traversal issue (CWE-22) and has a CVSS base score of 7.3 (High). On March 4 (see note), Rapid7 noted that JetBrains released a fixed version of TeamCity without notifying Rapid7 that fixes had been implemented and were generally available. When Rapid7 contacted JetBrains about their uncoordinated vulnerability disclosure, JetBrains published an advisory on the vulnerabilities without responding to Rapid7 on the disclosure timeline. JetBrains later responded to indicate that CVEs had been published. Impact Both vulnerabilities are authentication bypass vulnerabilities, the most severe of which, CVE-2024-27198, allows for a complete compromise of a vulnerable TeamCity server by a remote unauthenticated attacker, including unauthenticated RCE, as demonstrated via our exploit: Remediation On March 3, 2024, JetBrains released TeamCity 2023.11.4 which remediates both CVE-2024-27198 and CVE-2024-27199. Both of these vulnerabilities affect all versions of TeamCity prior to 2023.11.4. https://lnkd.in/epBnSDuZ

🚨 0-DAY ALERT 🚨 The Snyk Security Labs team has identified four critical/high severity vulnerabilities (#LeakyVessels) affecting core container ecosystem components, which can allow container breakouts. For more information about the #LeakyVessels vulnerability, including a full technical breakdown and mitigation details, read our recent blog post: https://snyk.co/ugxMV

🛑 Important 0-DAY ALERT! #LeakyVessels: Snyk Security Labs team has identified four critical/high vulnerabilities in core container ecosystem components that allow potential attackers to gain unauthorized access to the underlying host operating system from within the container. Read more and also leverage the free tool we are making available to see if you are impacted. Proud of Rory McNamara and the Snyk Security Labs team, and also Eli Cohen, Ran Nozik and team from our newest acquisition #helios all under the leadership of Lindsay Jack for the careful research to detect this, responsible disclosure working with a broad array of open source teams, technology vendors and customers to ensure fixes were in place, making a free detection tool available for those who want to quickly check their container infrastructure, and to Myke Lyons and Jonaki Egenolf and teams for their thoughtful leadership in this important disclosure that has wide impact! More details:

Do you have #LeakyVessels? 🐳 Find out how Snyk can provide actionable advice on how to find and fix vulnerabilities within your docker containers. Register now: https://snyk.co/ugxYV