PT-2016-5376 · Blackberry+1 · Blackberry Enterprise Mobility Server+1

Publicado 2016-12-16 · Atualizado 2016-12-22 · CVE-2016-3129

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions BlackBerry Good Enterprise Mobility Server versions 2.1.5.3 through 2.2.22.25

Description A remote shell execution issue in the Apache Karaf command shell implementation allows remote attackers to obtain local administrator rights on the server via commands executed on the Karaf command shell.

Recommendations For versions 2.1.5.3 through 2.2.22.25, consider disabling access to the Apache Karaf command shell as a temporary workaround until a patch is available. Restrict access to the Karaf command shell to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2016-3129

Produtos afetados

Apache Karaf

Blackberry Enterprise Mobility Server

Referências · 4

• http://securityfocus.com/bid/94959 · Nota
• https://osv.dev/vulnerability/CVE-2016-3129 · Aviso do Fabricante
• http://support.blackberry.com/kb/articleDetail?articleNumber=000038814&language=None · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-3129 · Nota de Segurança