CVE-2017-9370
HighSummary
CVE-2017-9370 is an information disclosure and elevation of privilege vulnerability in the BlackBerry Workspaces Server. An attacker with legitimate access to BlackBerry Workspaces could gain access to another user's workspace by making multiple login requests to the server.
Risk Assessment
The organization may be exposed to unauthorized access to user data, potentially leading to the leakage of sensitive information and privacy violations.
Recommendation
It is recommended to monitor and limit the number of login attempts and implement additional authentication mechanisms to minimize the risk of unauthorized access.
Other vulnerabilities in BlackBerry Workspaces Server
See all- CVE-2017-9368High
CVE-2017-9368 is an information disclosure vulnerability in the BlackBerry Workspaces Server that could allow an attacker to gain access to source code for server-side applications by crafting a request for specific files.
- CVE-2017-9367Critical
A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary files, or reveal the content of arbitrary files anywhere on the web server by crafting a URL with a manipulated POST request.
Original NVD description (English source)
An information disclosure / elevation of privilege vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker who has legitimate access to BlackBerry Workspaces to gain access to another user's workspace by making multiple login requests to the server.