Lucene search

BlackberryCVE-2016-3129

HistoryDec 16, 2016 - 9:59 a.m.

CVE-2016-3129

2016-12-1609:59:00

blackberry

web.nvd.nist.gov

cve-2016-3129

remote shell execution

blackberry good enterprise mobility server

gems

apache karaf command shell

vulnerability

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

CVSS3

6.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

6.6

Confidence

High

EPSS

0.004

Percentile

73.4%

JSON

A remote shell execution vulnerability in the BlackBerry Good Enterprise Mobility Server (GEMS) implementation of the Apache Karaf command shell in GEMS versions 2.1.5.3 to 2.2.22.25 allows remote attackers to obtain local administrator rights on the GEMS server via commands executed on the Karaf command shell.

Affected configurations

Nvd

Node

blackberrygood_enterprise_mobility_serverRange≤2.2.22.25

VendorProductVersionCPE
blackberrygood_enterprise_mobility_server*cpe:2.3:o:blackberry:good_enterprise_mobility_server:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
blackberry	good_enterprise_mobility_server	*	cpe:2.3:o:blackberry:good_enterprise_mobility_server::::::::

CNA Affected

[
  {
    "product": "BlackBerry GEMS versions 2.1.5.3 to 2.2.22.25",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "BlackBerry GEMS versions 2.1.5.3 to 2.2.22.25"
      }
    ]
  }
]

References

support.blackberry.com/kb/articleDetail?articleNumber=000038814&language=None

www.securityfocus.com/bid/94959

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

CVSS3

6.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

6.6

Confidence

High

EPSS

0.004

Percentile

73.4%

JSON

Related for CVE-2016-3129