CVE-2016-3127

2017-03-0318:00:00

blackberry

www.cve.org

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.4%

JSON

An information disclosure vulnerability in the logging implementation of BlackBerry Good Control Server versions earlier than 2.3.53.62 allows remote attackers to gain and use logged encryption keys to access certain resources within a customer’s Good deployment by gaining access to certain diagnostic log files through either a valid logon or an unrelated compromise of the server.

CNA Affected

[
  {
    "product": "BlackBerry Good Control Server versions earlier than 2.3.53.62",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "BlackBerry Good Control Server versions earlier than 2.3.53.62"
      }
    ]
  }
]