CVE-2014-9757

Published: Feb 8, 2016

Modified: Aug 6, 2024

PUBLISHED

Description

The Ignite Realtime Smack XMPP API, as used in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0, allows remote configured XMPP servers to execute arbitrary Java code via serialized data in an XMPP message.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20160122 January 2016 - Bamboo - Critical Security Advisory

mailing-list

x_refsource_BUGTRAQ

https://confluence.atlassian.com/bamboo/bamboo-security-advisory-2016-01-20-794376535.html

x_refsource_CONFIRM

https://jira.atlassian.com/browse/BAM-17099

x_refsource_CONFIRM

http://packetstormsecurity.com/files/135352/Bamboo-Deserialization-Missing-Authentication-Checks.html

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2014-9757

Description

Affected Products

References