CVE-2016-3129

Name of the Vulnerable Software and Affected Versions BlackBerry Good Enterprise Mobility Server versions 2.1.5.3 through 2.2.22.25

Description A remote shell execution issue in the Apache Karaf command shell implementation allows remote attackers to obtain local administrator rights on the server via commands executed on the Karaf command shell.

Recommendations For versions 2.1.5.3 through 2.2.22.25, consider disabling access to the Apache Karaf command shell as a temporary workaround until a patch is available. Restrict access to the Karaf command shell to minimize the risk of exploitation.