Medium We have identified and fixed an OS command injection vulnerability in the third-party Perforce library used by Bamboo.
- An attacker can take advantage of the vulnerability to execute arbitrary commands on a Bamboo server.
This issue is reported in our security advisory on this page:
http://confluence.atlassian.com/x/lwH6Dw
Patch is available, see the attached file.
[BAM-10030] OS command injection vulnerability in Perforce library
| Workflow | Original: Bamboo Workflow 2016 v1 - Restricted [ 1435853 ] | New: JAC Bug Workflow v3 [ 3379850 ] |
| Status | Original: Resolved [ 5 ] | New: Closed [ 6 ] |
| Workflow | Original: Bamboo Workflow 2016 v1 [ 1408331 ] | New: Bamboo Workflow 2016 v1 - Restricted [ 1435853 ] |
| Workflow | Original: Bamboo Workflow 2014 v2 [ 608717 ] | New: Bamboo Workflow 2016 v1 [ 1408331 ] |
| Workflow | Original: Bamboo Workflow 2014 [ 598210 ] | New: Bamboo Workflow 2014 v2 [ 608717 ] |
| Workflow | Original: Bamboo Workflow 2010 [ 351516 ] | New: Bamboo Workflow 2014 [ 598210 ] |
| Security | Original: Reporters and Developers [ 10070 ] |
| Description |
Original:
We have identified and fixed an OS command injection vulnerability in the Perforce library used by Bamboo.
* An attacker might take advantage of the vulnerability to execute arbitrary commands on a Bamboo server. This issue is reported in our security advisory on this page: http://confluence.atlassian.com/x/lwH6Dw You can read more about shell injection attacks at cgisecurity, CERT and other places on the web: * http://www.cgisecurity.com/xss-faq.html * http://www.cert.org/advisories/CA-2000-02.html |
New:
We have identified and fixed an OS command injection vulnerability in the third-party Perforce library used by Bamboo.
* An attacker can take advantage of the vulnerability to execute arbitrary commands on a Bamboo server. This issue is reported in our security advisory on this page: http://confluence.atlassian.com/x/lwH6Dw Patch is available, see the attached file. |
| Description |
Original:
We have identified and fixed a shell injection vulnerability in the Perforce library used by Bamboo.
* An attacker might take advantage of the vulnerability to execute arbitrary commands on a Bamboo server. This issue is reported in our security advisory on this page: http://confluence.atlassian.com/x/lwH6Dw You can read more about shell injection attacks at cgisecurity, CERT and other places on the web: * http://www.cgisecurity.com/xss-faq.html * http://www.cert.org/advisories/CA-2000-02.html |
New:
We have identified and fixed an OS command injection vulnerability in the Perforce library used by Bamboo.
* An attacker might take advantage of the vulnerability to execute arbitrary commands on a Bamboo server. This issue is reported in our security advisory on this page: http://confluence.atlassian.com/x/lwH6Dw You can read more about shell injection attacks at cgisecurity, CERT and other places on the web: * http://www.cgisecurity.com/xss-faq.html * http://www.cert.org/advisories/CA-2000-02.html |
| Summary | Original: Shell injection vulnerability in Perforce library | New: OS command injection vulnerability in Perforce library |
| Attachment | Original: undefined [ 53971 ] |
| Attachment | New: p4java-0.7.5-atlassian-6.jar [ 53972 ] |