Description
An information disclosure vulnerability in the BlackBerry Workspaces Server could result in an attacker gaining access to source code for server-side applications by crafting a request for specific files.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/96542
Vendor Advisory x_refsource_confirm
http://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000045696
Scores
CVSS v3
7.5
EPSS
0.0139
EPSS Percentile
68.9%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Details
CWE
CWE-200
Status
published
Products (19)
BlackBerry/Workspaces Server
BlackBerry Workspaces Server components Appliance-X 1.11.0 to 1.11.2, vApp versions 5.6.0 to 5.6.6
blackberry/workspaces_appliance-x
< 1.11.2
blackberry/workspaces_vapp
5.5.0
blackberry/workspaces_vapp
5.5.1
blackberry/workspaces_vapp
5.5.2
blackberry/workspaces_vapp
5.5.3
blackberry/workspaces_vapp
5.5.4
blackberry/workspaces_vapp
5.5.5
blackberry/workspaces_vapp
5.5.6
blackberry/workspaces_vapp
5.5.7
... and 9 more
Published
Oct 16, 2017
Tracked Since
Feb 18, 2026