Atlassian Bamboo Remote Code Execution Vulnerability

Bugtraq ID:	67622
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	May 26 2014 12:00AM
Updated:	May 26 2014 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:
Not Vulnerable:

Atlassian Bamboo Remote Code Execution Vulnerability

Atlassian Bamboo is prone to remote code execution vulnerability.

An attacker can exploit this issue to execute arbitrary java code within the context of the affected application.

Atlassian Bamboo prior to 5.6 are vulnerable.

Atlassian Bamboo Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Atlassian Bamboo Remote Code Execution Vulnerability

References:

• Bamboo Homepage (Atlassian)
  
• Bamboo Security Advisory 2014-05-21 (Atlassian )