CVE-2016-5229

Publicada em 02 ago 2016 · Atualizada em 06 ago 2024

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 7.1%

probabilidade de exploração

7.1%top 6% das CVEs

exploração observada

nãonenhuma fonte reporta

Atlassian Bamboo before 5.11.4.1 and 5.12.x before 5.12.3.1 does not properly restrict permitted deserialized classes, which allows remote attackers to execute arbitrary code via vectors related to XStream Serialization.

Produtos afetados

n/a · n/a

Referências

http://packetstormsecurity.com/files/138053/Bamboo-Deserialization-Issue.html https://confluence.atlassian.com/bamboo/bamboo-security-advisory-2016-07-20-831660461.html https://jira.atlassian.com/browse/BAM-17736 http://www.securityfocus.com/archive/1/539003/100/0/threaded http://www.securityfocus.com/bid/92057