Vulnerability in Blackberry Enterprise Service
CVE-2014-1469
BlackBerry Enterprise Server 5.x before 5.0.4 MR7 and Enterprise Service 10.x before 10.2.2 log cleartext credentials during exception handling, which allows local users to obtain sensitive information by reading the exception log file.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.004 (30.7th percentile) — read the EPSS interpretation.
Affected products
- Blackberry Blackberry_enterprise_service — versions 10.0, 10.1.0, 10.1.2
- Blackberry Enterprise_server
- Blackberry Enterprise_server_express — versions 5.0.4
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)