high8.8
CVE-2015-6576
Bamboo 2.2 before 5.8.5 and 5.9.x before 5.9.7 allows remote attackers with access to the Bamboo web interface to execute arbitrary Java code via an unspecifie…
Impact
Bamboo 2.2 before 5.8.5 and 5.9.x before 5.9.7 allows remote attackers with access to the Bamboo web interface to execute arbitrary Java code via an unspecified resource.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Bamboo | from 2.2 before 5.8.5 from 5.9 before 5.9.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/134065/Bamboo-Java-Code-Execution.html
- http://www.securityfocus.com/archive/1/536747/100/0/threaded
- https://confluence.atlassian.com/x/Hw7RLg
- https://jira.atlassian.com/browse/BAM-16439
- http://packetstormsecurity.com/files/134065/Bamboo-Java-Code-Execution.html
- http://www.securityfocus.com/archive/1/536747/100/0/threaded
- https://confluence.atlassian.com/x/Hw7RLg
- https://jira.atlassian.com/browse/BAM-16439