CVE-2010-2603

2010-12-1719:00:19

CWE-310

[email protected]

web.nvd.nist.gov

cve-2010-2603

rim blackberry

desktop software

encryption

vulnerability

weak password

database backup

brute force attack

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

6.6 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

RIM BlackBerry Desktop Software 4.7 through 6.0 for PC, and 1.0 for Mac, uses a weak password to encrypt a database backup file, which makes it easier for local users to decrypt the file via a brute force attack.

Affected configurations

NVD

Node

rimblackberry_desktop_softwareMatch4.7

rimblackberry_desktop_softwareMatch5.0

rimblackberry_desktop_softwareMatch5.0.1

rimblackberry_desktop_softwareMatch6.0

AND

microsoftwindows

Node

rimblackberry_desktop_softwareMatch1.0

AND

applemac_os_x

CPENameOperatorVersion
rim:blackberry_desktop_softwarerim blackberry desktop softwareeq4.7
rim:blackberry_desktop_softwarerim blackberry desktop softwareeq5.0
rim:blackberry_desktop_softwarerim blackberry desktop softwareeq5.0.1
rim:blackberry_desktop_softwarerim blackberry desktop softwareeq6.0

CPE	Name	Operator	Version
rim:blackberry_desktop_software	rim blackberry desktop software	eq	4.7
rim:blackberry_desktop_software	rim blackberry desktop software	eq	5.0
rim:blackberry_desktop_software	rim blackberry desktop software	eq	5.0.1
rim:blackberry_desktop_software	rim blackberry desktop software	eq	6.0