PT-2013-6115 · Microsoft+2 · Windows+2

Published 2013-11-16 · Updated 2017-08-29 · CVE-2013-6798

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions BlackBerry Link versions prior to 1.2.1.31 on Windows BlackBerry Link versions prior to 1.1.1 build 39 on Mac OS X

Description The issue allows context-dependent attackers to bypass intended restrictions on remote file-access folders via IPv6 WebDAV requests. This occurs because the software does not properly determine the user account for execution of Peer Manager in certain situations involving successive logins with different accounts.

Recommendations For BlackBerry Link on Windows, update to version 1.2.1.31 or later. For BlackBerry Link on Mac OS X, update to version 1.1.1 build 39 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-6798

Affected Products

Blackberry Link

Macos X

Windows

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2013-6798 · Security Note
• http://blackberry.com/btsc/KB35315 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89202 · Note