Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2016-5229
Description:Atlassian Bamboo before 5.11.4.1 and 5.12.x before 5.12.3.1 does not properly restrict permitted deserialized classes, which allows remote attackers to execute arbitrary code via vectors related to XStream Serialization.
Test IDs: 1.3.6.1.4.1.25623.1.0.105830  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-5229
BugTraq ID: 92057
http://www.securityfocus.com/bid/92057
Bugtraq: 20160726 July 2016 - Bamboo Server - Critical Security Advisory (Google Search)
http://www.securityfocus.com/archive/1/539003/100/0/threaded
http://packetstormsecurity.com/files/138053/Bamboo-Deserialization-Issue.html




© 1998-2025 E-Soft Inc. All rights reserved.