This vulnerability in Atlassian Bamboo Data Center involves improper authorization that permits an authenticated attacker with low privileges to access resources or functionality beyond their intended permissions. The CVSS 4.0 base score is 7.6, indicating high severity. The flaw affects specific versions starting from 10.0.0 through 12.1.0. Atlassian has addressed the issue in releases 10.2.22 and 12.1.10 and recommends upgrading to these or later versions. The vulnerability was identified through Atlassian's penetration testing program.

An authenticated attacker with low privileges can exploit this vulnerability to gain unauthorized access to Bamboo Data Center resources or functionality. This may lead to exposure of sensitive information or potentially allow execution of arbitrary code, increasing the risk to the confidentiality and integrity of the system.

Atlassian recommends upgrading affected Bamboo Data Center instances to version 10.2.22 or later if running a 10.2.x version, or to version 12.1.10 or later if running a 12.1.x version. If upgrading to the latest version is not possible, these specified fixed versions should be applied. Patch status is confirmed by vendor advisory through release notes. No alternative mitigations are stated.