Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:CTS:ATLASSIAN-BAMBOO-CE |
|---|---|
Severity |
Minor |
Recommended |
No |
Category |
HTTP |
Keywords |
Atlassian Bamboo Remote Code Execution |
Release Date |
2020/06/04 |
Update Number |
3288 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Atlassian Bamboo Remote Code Execution
This signature detects attempts to exploit a known vulnerability against Atlassian Bamboo. A successful attack can lead to arbitrary code execution.
Extended Description
Bamboo 2.2 before 5.8.5 and 5.9.x before 5.9.7 allows remote attackers with access to the Bamboo web interface to execute arbitrary Java code via an unspecified resource.
Affected Products
- Atlassian bamboo 2.2
- Atlassian bamboo 2.2.1
- Atlassian bamboo 2.2.2
- Atlassian bamboo 2.2.3
- Atlassian bamboo 2.2.4
- Atlassian bamboo 2.3
- Atlassian bamboo 2.3.1
- Atlassian bamboo 2.4
- Atlassian bamboo 2.4.1
- Atlassian bamboo 2.4.2
- Atlassian bamboo 2.4.3
- Atlassian bamboo 2.5
- Atlassian bamboo 2.5.1
- Atlassian bamboo 2.5.2
- Atlassian bamboo 2.5.3
- Atlassian bamboo 2.5.5
- Atlassian bamboo 2.6
- Atlassian bamboo 2.6.1
- Atlassian bamboo 2.6.2
- Atlassian bamboo 2.6.3
- Atlassian bamboo 2.7
- Atlassian bamboo 2.7.1
- Atlassian bamboo 2.7.2
- Atlassian bamboo 2.7.3
- Atlassian bamboo 2.7.4
- Atlassian bamboo 3.0
- Atlassian bamboo 3.0.1
- Atlassian bamboo 3.0.2
- Atlassian bamboo 3.0.3
- Atlassian bamboo 3.1
- Atlassian bamboo 3.1.1
- Atlassian bamboo 3.1.3
- Atlassian bamboo 3.1.4
- Atlassian bamboo 3.2
- Atlassian bamboo 3.2.2
- Atlassian bamboo 3.3
- Atlassian bamboo 3.3.1
- Atlassian bamboo 3.3.2
- Atlassian bamboo 3.3.3
- Atlassian bamboo 3.3.4
- Atlassian bamboo 3.4
- Atlassian bamboo 3.4.1
- Atlassian bamboo 3.4.2
- Atlassian bamboo 3.4.3
- Atlassian bamboo 3.4.4
- Atlassian bamboo 3.4.5
- Atlassian bamboo 4.0
- Atlassian bamboo 4.0.1
- Atlassian bamboo 4.1
- Atlassian bamboo 4.1.1
- Atlassian bamboo 4.1.2
- Atlassian bamboo 4.2
- Atlassian bamboo 4.2.1
- Atlassian bamboo 4.3
- Atlassian bamboo 4.3.1
- Atlassian bamboo 4.3.2
- Atlassian bamboo 4.3.3
- Atlassian bamboo 4.3.4
- Atlassian bamboo 4.4
- Atlassian bamboo 4.4.1
- Atlassian bamboo 4.4.2
- Atlassian bamboo 4.4.3
- Atlassian bamboo 4.4.4
- Atlassian bamboo 4.4.5
- Atlassian bamboo 4.4.8
- Atlassian bamboo 5.0
- Atlassian bamboo 5.0.1
- Atlassian bamboo 5.1
- Atlassian bamboo 5.1.1
- Atlassian bamboo 5.2
- Atlassian bamboo 5.2.1
- Atlassian bamboo 5.2.2
- Atlassian bamboo 5.3
- Atlassian bamboo 5.4
- Atlassian bamboo 5.4.1
- Atlassian bamboo 5.4.2
- Atlassian bamboo 5.5
- Atlassian bamboo 5.6
- Atlassian bamboo 5.6.1
- Atlassian bamboo 5.6.2
- Atlassian bamboo 5.7
- Atlassian bamboo 5.7.1
- Atlassian bamboo 5.7.2
- Atlassian bamboo 5.8
- Atlassian bamboo 5.8.1
- Atlassian bamboo 5.8.2
- Atlassian bamboo 5.9
- Atlassian bamboo 5.9.1
- Atlassian bamboo 5.9.2
- Atlassian bamboo 5.9.3
- Atlassian bamboo 5.9.4
References
- CVE: CVE-2015-6576