CVE-2015-8361 in Bamboo

Résumé

par MITRE

Multiple unspecified services in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 do not require authentication, which allows remote attackers to obtain sensitive information, modify settings, or manage build agents via unknown vectors involving the JMS port.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Réserver: 25/11/2015
• Divulgation: 08/02/2016
• Modérer: accepté
• Entrée: VDB-80825
• CPE: prêt
• CWE: CWE-284 (confirmé)
• CVSS: 9.1 (NVD)
• EPSS: 0.02844
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-8361
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-8361
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-8361/