CVE-2016-1914

概要

参考情報

• seclists.org/fulldisclosure/2016/Feb/95 · Mailing List
• security-assessment.com/files/documents/advisory/Blackberry%20BES12%20Self-Service%20Multiple%20Vulnerabilities.pdf · Exploit
• support.blackberry.com/kb/articleDetail · Patch
• securitytracker.com/id/1035095
• exploit-db.com/exploits/39481

blackberry enterprise service のその他の脆弱性

• CVE-2016-1915中 6.1Multiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attacke…
• CVE-2014-1469中 4.9BlackBerry Enterprise Server 5.x before 5.0.4 MR7 and Enterprise Service 10.x before 10.2.2 log cleartext credentials during exception handl…
• CVE-2014-1467中 5.0BlackBerry Enterprise Service 10 before 10.2.1, Universal Device Service 6, Enterprise Server Express for Domino through 5.0.4, Enterprise S…
• CVE-2013-3693高 7.9The BlackBerry Universal Device Service in BlackBerry Enterprise Service (BES) 10.0 through 10.1.2 does not properly restrict access to the …