568 matches found
CVE-2017-8907
Atlassian Bamboo 5.x before 5.15.7 and 6.x before 6.0.1 are affected by CVE-2017-8907 due to an improper permission check for deployment projects. An authenticated attacker who can log in as a user without edit permission (and with an existing green build plan) can create a deployment project and...
PT-2017-18614 · Atlassian · Bamboo
Name of the Vulnerable Software and Affected Versions: Atlassian Bamboo versions 5.x through 5.15.6 Atlassian Bamboo versions 6.x through 6.0.0 Description: The issue arises from incorrect permission checks for users creating deployment projects. An attacker with login access to Bamboo, but witho...
Incorrect permission check for deployment projects (CVE-2017-8907)
Bamboo did not correctly check if a user creating a deployment project had the edit permission and therefore the rights to do so. An attacker who can login to Bamboo as a user without the edit permission for deployment projects is able to use this vulnerability, provided there is an existing plan...
Incorrect permission check for deployment projects (CVE-2017-8907)
Bamboo did not correctly check if a user creating a deployment project had the edit permission and therefore the rights to do so. An attacker who can login to Bamboo as a user without the edit permission for deployment projects is able to use this vulnerability, provided there is an existing plan...
Atlassian Bamboo suffers from s2-045 remote code execution vulnerability
Atlassian Bamboo is a set of continuous integration build tools. Atlassian Bamboo uses Apache middleware as the framework, the framework exists S2-045 remote command execution vulnerability, allowing an attacker to exploit the vulnerability to remotely execute commands, obtain server privileges,...
Encrypt password variables in VARIABLE_CONTEXT and VARIABLE_BASELINE_ITEM tables
h3. Problem Definition Currently, Bamboo password variables are not encrypted in the VARIABLECONTEXT and VARIABLEBASELINEITEM tables, even though they are encrypted in VARIABLEDEFINITION h3. Suggested Solution Encrypt passwords in VARIABLECONTEXT and VARIABLEBASELINEITEM tables h3. Workaround...
Encrypt password variables in VARIABLE_CONTEXT and VARIABLE_BASELINE_ITEM tables
h3. Problem Definition Currently, Bamboo password variables are not encrypted in the VARIABLECONTEXT and VARIABLEBASELINEITEM tables, even though they are encrypted in VARIABLEDEFINITION h3. Suggested Solution Encrypt passwords in VARIABLECONTEXT and VARIABLEBASELINEITEM tables h3. Workaround...
Atlassian Bamboo Struts2 RCE Vulnerability
Atlassian Bamboo is prone to a remote code execution RCE vulnerability in Struts2. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Apache Struts 2 Remote Code Execution (CVE-2017-5638)
Description Bamboo used a version of Struts 2 that was vulnerable to CVE-2017-5638|https://cwiki.apache.org/confluence/display/WW/S2-045. Attackers can use this vulnerability to execute Java code of their choice on systems that have a vulnerable version of Bamboo Affected versions: All versions o...
Apache Struts 2 Remote Code Execution (CVE-2017-5638)
Description Bamboo used a version of Struts 2 that was vulnerable to CVE-2017-5638|https://cwiki.apache.org/confluence/display/WW/S2-045. Attackers can use this vulnerability to execute Java code of their choice on systems that have a vulnerable version of Bamboo Affected versions: All versions o...
Lucene query checks plan permission against random plan
h1. Summary Bamboo runs permission validation against random plan when execute report h1. Details When execute report generator Bamboo checks if user has READ permission to plan. Sometimes it checks it against another plan User mode Create 2 plans Plan1 and Plan2 in same project. And execute them...
Lucene query checks plan permission against random plan
h1. Summary Bamboo runs permission validation against random plan when execute report h1. Details When execute report generator Bamboo checks if user has READ permission to plan. Sometimes it checks it against another plan User mode Create 2 plans Plan1 and Plan2 in same project. And execute them...
Atlassian Bamboo Server Version Detection
Binary data 9652.prm...
Atlassian Bamboo Server 5.8.x < 5.8.5 RCE
Binary data 9666.prm...
Atlassian Bamboo Server Detection
Binary data 9651.prm...
Atlassian Bamboo Server < 5.11.4.1 RCE
Binary data 9669.prm...
Atlassian Bamboo Server 5.9.x < 5.9.7 RCE
Binary data 9667.prm...
Atlassian Bamboo Server 5.12.x < 5.12.3.1 RCE
Binary data 9670.prm...
Atlassian Bamboo Server 5.9.x < 5.9.9 Multiple Vulnerabilities
Binary data 9668.prm...
CVE-2016-5229
Atlassian Bamboo before 5.11.4.1 and 5.12.x before 5.12.3.1 does not properly restrict permitted deserialized classes, which allows remote attackers to execute arbitrary code via vectors related to XStream Serialization...