CVE-2024-41827

Name of the Vulnerable Software and Affected Versions JetBrains TeamCity versions prior to 2024.07

Description The issue is related to an incorrect session expiration in the JetBrains TeamCity continuous integration and delivery system. Exploitation of this issue could allow a remote attacker to impact the confidentiality and integrity of protected information. Access tokens could continue working after deletion or expiration.

Recommendations For versions prior to 2024.07, update to a version that includes the fix for this issue to prevent access tokens from continuing to work after deletion or expiration. As a temporary workaround, consider restricting access to sensitive areas of the system until the update is applied.