PT-2017-8347 · Blackberry · Blackberry Enterprise Server

Publicado 2017-01-13 · Atualizado 2017-02-03 · CVE-2016-3130

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BlackBerry Enterprise Server versions 12 through 12.5.2

Description An information disclosure issue in the Core and Management Console of BlackBerry Enterprise Server allows remote attackers to obtain local or domain credentials of an administrator or user account by sniffing traffic between the two elements during a login attempt.

Recommendations For versions 12 through 12.5.2, update to a version that contains a fix for this issue to prevent remote attackers from obtaining sensitive credentials.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

CWE-255

Identificadores relacionados

CVE-2016-3130

Produtos afetados

Blackberry Enterprise Server

Referências · 5

• https://osv.dev/vulnerability/CVE-2016-3130 · Aviso do Fabricante
• http://securityfocus.com/bid/95924 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-3130 · Nota de Segurança
• http://support.blackberry.com/kb/articleDetail?articleNumber=000038914 · Nota
• http://securitytracker.com/id/1037584 · Nota