PT-2023-18278 · Blackberry · Blackberry Athoc

Published 2023-09-12 · Updated 2023-09-15 · CVE-2023-21522

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions BlackBerry AtHoc version 7.15

Description A Reflected Cross-site Scripting (XSS) vulnerability in the Management Console (Reports) could allow an attacker to control a script executed in the victim's browser, enabling them to execute script commands in the context of the affected user account.

Recommendations For version 7.15, consider disabling access to the Management Console (Reports) until a patch is available to prevent potential exploitation. Restricting user privileges in the Management Console can also help minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-21522

Affected Products

Blackberry Athoc

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-21522 · Security Note
• https://support.blackberry.com/kb/articleDetail?articleNumber=000112406 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-21522 · Vendor Advisory
• https://t.me/cibsecurity/70337 · Telegram Post
• https://twitter.com/CVEnew/status/1701666657406767430 · Twitter Post