CVE-2017-9367
CriticalSummary
A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary files, or reveal the content of arbitrary files anywhere on the web server by crafting a URL with a manipulated POST request.
Risk Assessment
This vulnerability could lead to unauthorized access to sensitive data and allow attackers to perform malicious actions on the server, posing a serious threat to the organization's security.
Recommendation
It is recommended to update the BlackBerry Workspaces Server to the latest version that includes security patches and to implement appropriate access control mechanisms.
Original NVD description (English source)
A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary files, or reveal the content of arbitrary files anywhere on the web server by crafting a URL with a manipulated POST request.