Description (CNA)
An unspecified resource in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 allows remote attackers to execute arbitrary Java code via serialized data to the JMS port.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/archive/1/537347/100/0/threaded
- https://jira.atlassian.com/browse/BAM-17101
- https://confluence.atlassian.com/bamboo/bamboo-security-advisory-2016-01-20-794376535.html
- http://packetstormsecurity.com/files/135352/Bamboo-Deserialization-Missing-Authentication-Checks.html
ADP enrichment
No English description supplied.