CVE-2015-8360 | BDVDB-2026-74299 Detail

Description#

An unspecified resource in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 allows remote attackers to execute arbitrary Java code via serialized data to the JMS port.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/537347/100/0/threaded
https://jira.atlassian.com/browse/BAM-17101
https://confluence.atlassian.com/bamboo/bamboo-security-advisory-2016-01-20-794376535.html
http://packetstormsecurity.com/files/135352/Bamboo-Deserialization-Missing-Authentication-Checks.html

Exploit#

No public exploit known

History#

Version 12016-02-08Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.