Get product advice from experts

Ask a question →

Join a community group

Find a group →

Advance your career with learning paths

Take a free class →

Earn badges and rewards

Connect and share ideas at events

See the calendar →

Community
Products
Bamboo
Questions
Is atlassian-bamboo-agent-installer-8.0.4.jar class log4j 2.9.0 vulnerable to CVE-2021-44228

Is atlassian-bamboo-agent-installer-8.0.4.jar class log4j 2.9.0 vulnerable to CVE-2021-44228

Edited

We had to extract the atlassian-bamboo-agent-installer-8.0.4.jar and to analyse for CVE-2021-44228 for our client.

What we found was that log4j 2.9.0 is in the atlassian-bamboo-agent-installer-8.0.4.jar/classpath.zip, but apparently its not an issue per Nexus-IQ.

Any idea if atlassian will be updating the atlassian-bamboo-agent-installer-8.0.4.jar ?

Below are the extracted findings of the bamboo agent installer jar

1 answer

1 vote

Please see the advisory we released today - Multiple Products Security Advisory - Log4j Vulnerable To Remote Code Execution - CVE-2021-44228 - for the specific information in regards to Bamboo.

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

Hi Daniel,

Thanks for getting back to me. I've checked our bamboo server and it seems clean per the advisory.

I'm actually asking for the bamboo agent which is not stated

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

Like • Steffen Opel [Utoolity] likes this

Bamboo agents are not affected as well. Added it to advisory

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

Like • Steffen Opel [Utoolity] likes this

Hi Alexey,

I still can't see any reference to Bamboo agents on the linked advisory?

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

Like

Old version was cached, it should be visible now

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

Like • Daniel Eads likes this

Reply

Suggest an answer

Log in or Sign up to answer

Was this helpful?

Thanks!

TAGS