PT-2018-6514 · Blackberry · Blackberry Uem Management Console

Published 2018-03-13 · Updated 2024-09-17 · CVE-2017-17442

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: BlackBerry UEM Management Console versions 12.7.1 and earlier

Description: A reflected cross-site scripting issue could allow an attacker to execute script commands in the context of the affected UEM Management Console account. This can be achieved by crafting a malicious link and persuading a user with legitimate access to the Management Console to click on it.

Recommendations: For versions 12.7.1 and earlier, update to a version later than 12.7.1 to resolve the issue. As a temporary workaround, consider restricting access to the Management Console to minimize the risk of exploitation. Avoid clicking on suspicious links, especially those from untrusted sources, to prevent potential attacks.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-17442

Affected Products

Blackberry Uem Management Console

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-17442 · Security Note
• https://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000048073 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-17442 · Vendor Advisory
• http://support.blackberry.com/kb/articleDetail?articleNumber=000047227 · Note
• https://t.me/cvenotify/94862 · Telegram Post