Atlassian Bamboo Unspecified Security Bypass Vulnerability

Bugtraq ID:	65831
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 26 2014 12:00AM
Updated:	Feb 26 2014 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Atlassian Bamboo 4.0.2 Atlassian Bamboo 4.0.1 Atlassian Bamboo 3.1.4 Atlassian Bamboo 1.2.2 Atlassian Bamboo 5.2 Atlassian Bamboo 4.0.0 Atlassian Bamboo 3.4.4 Atlassian Bamboo 3.4.3 Atlassian Bamboo 3.4.2 Atlassian Bamboo 3.4.1 Atlassian Bamboo 3.4 Atlassian Bamboo 3.3.3 Atlassian Bamboo 3.3.2 Atlassian Bamboo 3.3.1 Atlassian Bamboo 3.2.2 Atlassian Bamboo 3.2 Atlassian Bamboo 3.1.3 Atlassian Bamboo 3.1.1 Atlassian Bamboo 3.0.3 Atlassian Bamboo 3.0.2 Atlassian Bamboo 3.0.1 Atlassian Bamboo 3.0 Atlassian Bamboo 2.7.4 Atlassian Bamboo 2.7.3 Atlassian Bamboo 2.7.2 Atlassian Bamboo 2.7.1 Atlassian Bamboo 2.7 Atlassian Bamboo 2.6.3 Atlassian Bamboo 2.6.2 Atlassian Bamboo 2.6.1 Atlassian Bamboo 2.6 Atlassian Bamboo 2.5.5 Atlassian Bamboo 2.5.3 Atlassian Bamboo 2.5.2 Atlassian Bamboo 2.5.1 Atlassian Bamboo 2.5 Atlassian Bamboo 2.4.3 Atlassian Bamboo 2.4.2 Atlassian Bamboo 2.4.1 Atlassian Bamboo 2.4 Atlassian Bamboo 2.3.1 Atlassian Bamboo 2.3 Atlassian Bamboo 2.2.4 Atlassian Bamboo 2.2.3 Atlassian Bamboo 2.2.2 Atlassian Bamboo 2.2.1 Atlassian Bamboo 2.2 Atlassian Bamboo 2.1.5 Atlassian Bamboo 2.1.4 Atlassian Bamboo 2.1.3 Atlassian Bamboo 2.1.2 Atlassian Bamboo 2.1.1 Atlassian Bamboo 2.1 Atlassian Bamboo 2.0.6 Atlassian Bamboo 2.0.5 Atlassian Bamboo 2.0.4 Atlassian Bamboo 2.0.3 Atlassian Bamboo 2.0.2 Atlassian Bamboo 2.0.1 Atlassian Bamboo 2.0 Beta9 Atlassian Bamboo 2.0 Beta8 Atlassian Bamboo 2.0 Beta6 Atlassian Bamboo 2.0 Beta5 Atlassian Bamboo 2.0 Beta4 Atlassian Bamboo 2.0 Beta3 Atlassian Bamboo 2.0 Beta2 Atlassian Bamboo 2.0 Beta1 Atlassian Bamboo 2.0 Beta Atlassian Bamboo 1.2.4 Atlassian Bamboo 1.2.3 Atlassian Bamboo 1.2.1 Atlassian Bamboo 1.1.2 Atlassian Bamboo 1.1.1 Atlassian Bamboo 1.1 Atlassian Bamboo 1.0.5 Atlassian Bamboo 1.0.4 Atlassian Bamboo 1.0.3 Atlassian Bamboo 1.0.2 Atlassian Bamboo 1.0.1 Atlassian Bamboo 1.0 Beta Atlassian Bamboo 1.0
Not Vulnerable:	Atlassian Bamboo 5.2.2

Atlassian Bamboo Unspecified Security Bypass Vulnerability

Atlassian Bamboo is prone to an unspecified security-bypass vulnerability.

Successful exploits may allow an attacker to bypass certain security restrictions and to perform unauthorized actions; this may aid in launching further attacks.

Versions prior to Atlassian Bamboo 5.2.2 are vulnerable.

Atlassian Bamboo Unspecified Security Bypass Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Atlassian Bamboo Unspecified Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Atlassian Bamboo Unspecified Security Bypass Vulnerability

References:

• Bamboo Security Advisory 2014-02-26 (Atlassian)