CVE-2017-9368

Опубликовано: 16 окт. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

An information disclosure vulnerability in the BlackBerry Workspaces Server could result in an attacker gaining access to source code for server-side applications by crafting a request for specific files.

Ссылки

http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000045696
Vendor Advisory
http://www.securityfocus.com/bid/96542
Third Party Advisory
VDB Entry
http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000045696
Vendor Advisory
http://www.securityfocus.com/bid/96542
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:blackberry:workspaces_vapp:5.5.0:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:workspaces_vapp:5.5.1:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:workspaces_vapp:5.5.2:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:workspaces_vapp:5.5.3:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:workspaces_vapp:5.5.4:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:workspaces_vapp:5.5.5:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:workspaces_vapp:5.5.6:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:workspaces_vapp:5.5.7:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:workspaces_vapp:5.5.8:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:workspaces_vapp:5.5.9:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:blackberry:workspaces_vapp:5.6.0:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:workspaces_vapp:5.6.1:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:workspaces_vapp:5.6.2:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:workspaces_vapp:5.6.3:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:workspaces_vapp:5.6.4:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:workspaces_vapp:5.6.5:*:*:*:*:*:*:*

cpe:2.3:a:blackberry:workspaces_vapp:5.6.6:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:a:blackberry:workspaces_appliance-x:*:*:*:*:*:*:*:*

Версия до 1.11.2 (включая)

EPSS

Процентиль: 52%

0.00291

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-v5j2-7w6j-265j