CVE-2017-9367
CriticalSummary
A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary files, or reveal the content of arbitrary files anywhere on the web server by crafting a URL with a manipulated POST request.
Risk Assessment
This vulnerability could lead to unauthorized access to sensitive data and allow attackers to perform malicious actions on the server, posing a serious threat to the organization's security.
Recommendation
It is recommended to update the BlackBerry Workspaces Server to the latest version that includes security patches and to implement appropriate access control mechanisms.
Other vulnerabilities in BlackBerry Workspaces Server
See all- CVE-2017-9368High
CVE-2017-9368 is an information disclosure vulnerability in the BlackBerry Workspaces Server that could allow an attacker to gain access to source code for server-side applications by crafting a request for specific files.
- CVE-2017-9370High
CVE-2017-9370 is an information disclosure and elevation of privilege vulnerability in the BlackBerry Workspaces Server. An attacker with legitimate access to BlackBerry Workspaces could gain access to another user's workspace by making multiple login requests to the server.
Original NVD description (English source)
A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary files, or reveal the content of arbitrary files anywhere on the web server by crafting a URL with a manipulated POST request.