CVE-2013-6798

Опубликовано: 18 нояб. 2013

Источник: nvd

CVSS2: 5.8

EPSS Низкий

Описание

BlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 build 39 on Mac OS X does not properly determine the user account for execution of Peer Manager in certain situations involving successive logins with different accounts, which allows context-dependent attackers to bypass intended restrictions on remote file-access folders via IPv6 WebDAV requests, a different vulnerability than CVE-2013-3694.

Ссылки

http://www.blackberry.com/btsc/KB35315
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/89202
http://www.blackberry.com/btsc/KB35315
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/89202

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:blackberry:blackberry_link:*:*:*:*:*:*:*:*

Версия до 1.2.0.28 (включая)

cpe:2.3:a:blackberry:blackberry_link:1.0.1.12:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:blackberry_link:1.1.1.26:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:blackberry_link:1.1.1.41:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:blackberry_link:1.2.0.12:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

Одно из

cpe:2.3:a:blackberry:blackberry_link:*:*:*:*:*:*:*:*

Версия до 1.1.1.26 (включая)

cpe:2.3:a:blackberry:blackberry_link:1.0.1.12:*:*:*:*:*:*:*

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00454

Низкий

5.8 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-qmjj-q2rr-fr9f

github

больше 3 лет назад