PT-2018-18692

CVE-2018-8889

·

Published

2018-09-19

·

Updated

2018-12-04

Description by

CVSS 2.0
4.7
Medium
MetricsAV:L/AC:M/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions BlackBerry Enterprise Mobility Server (BEMS) versions 2.8.17.29 and earlier
Description A directory traversal issue in the Connect Service of BEMS could allow an attacker to retrieve arbitrary files in the context of a BEMS administrator account.
Recommendations For versions 2.8.17.29 and earlier, update to a version later than 2.8.17.29 to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2018-8889
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com