Description (CNA)
Bamboo 2.2 before 5.8.5 and 5.9.x before 5.9.7 allows remote attackers with access to the Bamboo web interface to execute arbitrary Java code via an unspecified resource.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/archive/1/536747/100/0/threaded
- https://confluence.atlassian.com/x/Hw7RLg
- https://jira.atlassian.com/browse/BAM-16439
- http://packetstormsecurity.com/files/134065/Bamboo-Java-Code-Execution.html
ADP enrichment
No English description supplied.