Atlassian Bamboo Server Version Detection

Binary data 9652.prm...

Atlassian Bamboo Server 5.8.x < 5.8.5 RCE

Binary data 9666.prm...

Atlassian Bamboo Server Detection

Binary data 9651.prm...

Atlassian Bamboo Server 5.12.x < 5.12.3.1 RCE

Binary data 9670.prm...

Atlassian Bamboo Server < 5.11.4.1 RCE

Binary data 9669.prm...

Atlassian Bamboo Server 5.9.x < 5.9.7 RCE

Binary data 9667.prm...

Atlassian Bamboo Server 5.9.x < 5.9.9 Multiple Vulnerabilities

Binary data 9668.prm...

CVE-2016-5229

Atlassian Bamboo before 5.11.4.1 and 5.12.x before 5.12.3.1 does not properly restrict permitted deserialized classes, which allows remote attackers to execute arbitrary code via vectors related to XStream Serialization...

CVE-2016-5229

Atlassian Bamboo before 5.11.4.1 and 5.12.x before 5.12.3.1 does not properly restrict permitted deserialized classes, which allows remote attackers to execute arbitrary code via vectors related to XStream Serialization...

Code injection

Atlassian Bamboo before 5.11.4.1 and 5.12.x before 5.12.3.1 does not properly restrict permitted deserialized classes, which allows remote attackers to execute arbitrary code via vectors related to XStream Serialization...

CVE-2016-5229

CVE-2016-5229 affects Atlassian Bamboo prior to 5.11.4.1 and 5.12.x prior to 5.12.3.1. The issue arises from insufficient restriction of deserialized classes during XStream-based deserialization, enabling remote code execution via crafted input. A fix is available: Bamboo 5.12.3.1 and 5.11.4.1 (a...

CVE-2016-5229

Atlassian Bamboo before 5.11.4.1 and 5.12.x before 5.12.3.1 does not properly restrict permitted deserialized classes, which allows remote attackers to execute arbitrary code via vectors related to XStream Serialization...

Atlassian Bamboo Remote Code Execution Vulnerability

Atlassian Bamboo is a set of continuous integration build tools from Atlassian Australia. A remote code execution vulnerability exists in Atlassian Bamboo. An attacker could exploit this vulnerability to execute arbitrary code in an affected application...

Atlassian Bamboo RCE Vulnerability

Atlassian Bamboo is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2016-5229 - Deserialisation resulting in remote code execution caused by insufficient restriction on permitted deserialised classes

Bamboo had a resource that deserialised input from build agents and did not sufficiently restrict which classes could be deserialised. To exploit this issue, attackers need to have a valid Bamboo agent fingerprint or be able to run code on a Bamboo agent. Affected versions: All versions of Bamboo...

CVE-2016-5229 - Deserialisation resulting in remote code execution caused by insufficient restriction on permitted deserialised classes

Bamboo had a resource that deserialised input from build agents and did not sufficiently restrict which classes could be deserialised. To exploit this issue, attackers need to have a valid Bamboo agent fingerprint or be able to run code on a Bamboo agent. Affected versions: All versions of Bamboo...

Bamboo Paper - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Bamboo Paper published at the 'play' market has multiple vulnerabilities...

Atlassian Bamboo Information Disclosure Vulnerability

Atlassian Bamboo is a set of continuous integration build tools from Atlassian Australia. A security vulnerability exists in Atlassian Bamboo versions prior to 5.9.9 and 5.10.x versions prior to 5.10.0 in the service, which can be exploited by remote attackers to obtain sensitive information,...

Atlassian Bamboo Arbitrary Code Execution Vulnerability

Atlassian Bamboo is a set of continuous integration build tools from Atlassian Australia. A security vulnerability exists in a resource in Atlassian Bamboo versions prior to 5.9.9 and 5.10.x versions prior to 5.10.0, which can be exploited by remote attackers to execute arbitrary Java code by...

Atlassian Bamboo Ignite Realtime Smack XMPP API Arbitrary Code Execution Vulnerability

Atlassian Bamboo is a set of continuous integration build tools from Atlassian Australia. A security vulnerability in the Ignite Realtime Smack XMPP API used in Atlassian Bamboo versions prior to 5.9.9 and 5.10.x prior to 5.10.0 can be exploited by remote attackers to execute arbitrary Java code...