CVE-2015-6576

Related Files

Atlassian Bamboo Java Deserialization Code Execution

Posted Nov 20, 2015

Authored by Jonas

Atlassian Bamboo remote code execution exploit that leverages the java deserialization vulnerability as noted in CVE-2015-6576.

tags | exploit, java, remote, code execution

advisories | CVE-2015-6576

SHA-256 | 607a629353c90b0d484735e431ce673d9f7f7ae92d4516f5a50546cb0b881ca6

Download | Favorite | View

Bamboo Java Code Execution

Posted Oct 23, 2015

Authored by David Black

Bamboo had a resource that deserialised arbitrary user input without restriction. Attackers can use this vulnerability to execute Java code of their choice on systems that have a vulnerable version of Bamboo. To exploit this issue, attackers need to be able to access the Bamboo web interface.

tags | advisory, java, web, arbitrary

advisories | CVE-2015-6576

SHA-256 | d92d7a7741f8085d106c9c636c2d5147d69c3234f902a1eccb57a0203ec89b96

Download | Favorite | View