Lucene search
K

6 matches found

Tenable Nessus
Tenable Nessus
added 2017/06/23 12:0 a.m.33 views

Atlassian Bamboo 5.x < 5.15.7 / 6.0.x < 6.0.1 Incorrect Permission Check RCE

According to its self-reported version number, the instance of Atlassian Bamboo running on the remote host is 5.x prior to 5.15.7 or 6.0.x prior to 6.0.1. It is, therefore, affected by a remote code execution vulnerability due to improper validation of edit permissions for deployment projects. An...

8.8CVSS8.1AI score0.00448EPSS
Exploits1References3
Prion
Prion
added 2017/06/14 8:29 p.m.17 views

Design/Logic Flaw

Atlassian Bamboo 5.x before 5.15.7 and 6.x before 6.0.1 did not correctly check if a user creating a deployment project had the edit permission and therefore the rights to do so. An attacker who can login to Bamboo as a user without the edit permission for deployment projects is able to use this...

6.5CVSS8.8AI score0.00448EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2017/06/14 8:29 p.m.0 views

CVE-2017-8907

Atlassian Bamboo 5.x before 5.15.7 and 6.x before 6.0.1 did not correctly check if a user creating a deployment project had the edit permission and therefore the rights to do so. An attacker who can login to Bamboo as a user without the edit permission for deployment projects is able to use this...

8.8CVSS6.4AI score
Exploits0References2
NVD
NVD
added 2017/06/14 8:29 p.m.18 views

CVE-2017-8907

Atlassian Bamboo 5.x before 5.15.7 and 6.x before 6.0.1 did not correctly check if a user creating a deployment project had the edit permission and therefore the rights to do so. An attacker who can login to Bamboo as a user without the edit permission for deployment projects is able to use this...

8.8CVSS8.8AI score0.00448EPSS
Exploits1References2
Atlassian
Atlassian
added 2017/05/23 4:7 a.m.91 views

Incorrect permission check for deployment projects (CVE-2017-8907)

Bamboo did not correctly check if a user creating a deployment project had the edit permission and therefore the rights to do so. An attacker who can login to Bamboo as a user without the edit permission for deployment projects is able to use this vulnerability, provided there is an existing plan...

8.8CVSS2.4AI score0.00448EPSS
Exploits1Affected Software1
ThreatPost
ThreatPost
added 2010/03/16 1:49 p.m.35 views

Security Risks Abound in Virtualized Environments

Through 2012, 60 percent of virtualized servers will be less secure than the physical servers they replace, according to Gartner. Although they expect this figure to fall to 30 percent by the end of 2015, analysts warned that many virtualization deployment projects are being undertaken without...

7.2CVSS1.7AI score0.88004EPSS
Exploits6References2
Rows per page
Query Builder