CVE-2015-8361

CVE-2015-8361 is a critical vulnerability affecting Atlassian Bamboo versions before 5.9.9 and 5.10.x before 5.10.0, where multiple services fail to require authentication. This allows unauthenticated remote attackers to gain sensitive information, alter settings, or manage build agents through unspecified vectors involving the JMS port. With a CVSS score of 9.1 (CRITICAL), the vulnerability is easily exploitable over the network with low attack complexity and no user interaction, leading to high impact on confidentiality and integrity. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.