Authentication flaw

2016-02-0819:59:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.6%

JSON

Multiple unspecified services in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 do not require authentication, which allows remote attackers to obtain sensitive information, modify settings, or manage build agents via unknown vectors involving the JMS port.

CPENameOperatorVersion
bambooeq2.4.1
bambooeq2.6.2
bambooeq5.7
bambooeq2.5.2
bambooeq3.4.5
bambooeq2.7.3
bambooeq2.4.3
bambooeq3.1
bambooeq5.2.1
bambooeq5.4