CVE-2011-0290

Опубликовано: 21 окт. 2011

Источник: nvd

CVSS2: 6.5

EPSS Низкий

Описание

The BlackBerry Collaboration Service in Research In Motion (RIM) BlackBerry Enterprise Server (BES) 5.0.3 through MR4 for Microsoft Exchange and Lotus Domino allows remote authenticated users to log into arbitrary user accounts associated with the same organization, and send messages, read messages, read contact lists, or cause a denial of service (login unavailability), via unspecified vectors.

Ссылки

http://secunia.com/advisories/46370
Vendor Advisory
http://securitytracker.com/id?1026179
http://www.blackberry.com/btsc/KB28524
Exploit
Vendor Advisory
http://www.osvdb.org/76286
http://www.securityfocus.com/bid/50064
https://exchange.xforce.ibmcloud.com/vulnerabilities/70519
http://secunia.com/advisories/46370
Vendor Advisory
http://securitytracker.com/id?1026179
http://www.blackberry.com/btsc/KB28524
Exploit
Vendor Advisory
http://www.osvdb.org/76286
http://www.securityfocus.com/bid/50064
https://exchange.xforce.ibmcloud.com/vulnerabilities/70519

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:rim:blackberry_enterprise_server:5.0.3:*:*:*:*:*:*:*

Одно из

cpe:2.3:a:lotus:domino:*:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:*:*:*:*:*:*:*:*

EPSS

Процентиль: 72%

0.00716

Низкий

6.5 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-jrm8-f68q-rfrc

github

больше 3 лет назад