CVE-2015-6576

Bamboo 2.2 before 5.8.5 and 5.9.x before 5.9.7 allows remote attackers with access to the Bamboo web interface to execute arbitrary Java code via an unspecified resource.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2017-10-03

Last modified

2024-08-06

Weaknesses

CWE-94

Affected products

• Bamboo (Atlassian)

References

• http://packetstormsecurity.com/files/134065/Bamboo-Java-Code-Execution.html
• http://www.securityfocus.com/archive/1/536747/100/0/threaded
• https://confluence.atlassian.com/x/Hw7RLg
• https://jira.atlassian.com/browse/BAM-16439