PT-2025-47468 · Blackberry · Blackberry Athoc

CVE-2025-12766 · Publicado 2025-11-19 · Atualizado 2025-12-01

Positive Technologies (AI Summary)

CVSS v3.1

5.0

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions BlackBerry AtHoc (OnPrem) version 7.21

Description An Insecure Direct Object Reference (IDOR) exists in the Management Console of BlackBerry AtHoc (OnPrem) version 7.21. This flaw could allow an attacker to obtain unauthorized information about other organizations hosted on the same Interactive Warning System (IWS). The issue involves an improper access control mechanism, potentially allowing unauthorized access to sensitive data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

IDOR

Enumeração de Fraquezas

CWE-639

Identificadores relacionados

CVE-2025-12766

Produtos afetados

Blackberry Athoc

Referências · 6

• https://twitter.com/dailycve/status/1995574161016815852 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1991187292443275634 · Publicação no Twitter
• https://support.blackberry.com/pkb/s/article/140929 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-12766 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-12766 · Aviso do Fabricante
• https://support.blackberry.com/community/s/article/140929 · Nota