CVE-2016-3130

Опубликовано: 13 янв. 2017

Источник: nvd

CVSS3: 8.1

CVSS2: 4.3

EPSS Низкий

Описание

An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to obtain local or domain credentials of an administrator or user account by sniffing traffic between the two elements during a login attempt.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:blackberry:enterprise_service:12.0.0:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:enterprise_service:12.0.1:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:enterprise_service:12.1.0:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:enterprise_service:12.2.0:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:enterprise_service:12.2.1:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:enterprise_service:12.3.0:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:enterprise_service:12.3.1:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:enterprise_service:12.4.0:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:enterprise_service:12.4.1:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:enterprise_service:12.5.0a:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:enterprise_service:12.5.1:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:enterprise_service:12.5.2:*:*:*:*:*:*:*

EPSS

Процентиль: 56%

0.00344

Низкий

8.1 High

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-4629-w9q3-57jr