CVE-2015-8361
CriticalSummary
Multiple unspecified services in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 do not require authentication, allowing remote attackers to obtain sensitive information, modify settings, or manage build agents.
Risk Assessment
The lack of authentication poses a serious security risk for organizations, enabling attackers to access critical data and system configurations.
Recommendation
It is recommended to update Atlassian Bamboo to the latest version to eliminate this vulnerability and implement appropriate authentication mechanisms for all services.
Original NVD description (English source)
Multiple unspecified services in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 do not require authentication, which allows remote attackers to obtain sensitive information, modify settings, or manage build agents via unknown vectors involving the JMS port.