CVE-2015-8361 in Bamboo

Riassunto

di MITRE

Multiple unspecified services in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 do not require authentication, which allows remote attackers to obtain sensitive information, modify settings, or manage build agents via unknown vectors involving the JMS port.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 25/11/2015
• Divulgazione: 08/02/2016
• Moderazione: accettato
• Voce: VDB-80825
• CPE: pronto
• CWE: CWE-284 (confermato)
• CVSS: 9.1 (NVD)
• EPSS: 0.02844
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-8361
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-8361
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-8361/