HTTP: Atlassian Bamboo Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Atlassian Bamboo. A successful attack can lead to arbitrary code execution.

Extended Description

Bamboo 2.2 before 5.8.5 and 5.9.x before 5.9.7 allows remote attackers with access to the Bamboo web interface to execute arbitrary Java code via an unspecified resource.

Affected Products

Atlassian bamboo

References

CVE: CVE-2015-6576

Short Name
HTTP:CTS:ATLASSIAN-BAMBOO-CE
Severity
Minor
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
Atlassian Bamboo CVE-2015-6576 Code Execution Remote
Release Date
06/04/2020
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3337
False Positive
Unknown
Vendors

Atlassian

CVSS Score

6.5

Found a potential security threat?