CVE-2016-3130

Name of the Vulnerable Software and Affected Versions BlackBerry Enterprise Server versions 12 through 12.5.2

Description An information disclosure issue in the Core and Management Console of BlackBerry Enterprise Server allows remote attackers to obtain local or domain credentials of an administrator or user account by sniffing traffic between the two elements during a login attempt.

Recommendations For versions 12 through 12.5.2, update to a version that contains a fix for this issue to prevent remote attackers from obtaining sensitive credentials.