PT-2018-18694 · Blackberry · Blackberry Uem

Publicado 2018-12-20 · Atualizado 2019-01-03 · CVE-2018-8891

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions BlackBerry UEM versions prior to 12.9.1

Description The issue concerns stored cross-site scripting (XSS) vulnerabilities in the Management Console. These vulnerabilities could allow an attacker to store script commands that could later be executed in the context of another Management Console administrator.

Recommendations For versions prior to 12.9.1, update to version 12.9.1 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2018-8891

Produtos afetados

Blackberry Uem

Referências · 3

• http://support.blackberry.com/kb/articleDetail?articleNumber=000054162 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-8891 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-8891 · Nota de Segurança