CVE-2017-9367

2017-10-1621:00:00

blackberry

www.cve.org

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

59.8%

JSON

A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary files, or reveal the content of arbitrary files anywhere on the web server by crafting a URL with a manipulated POST request.

CNA Affected

[
  {
    "product": "Workspaces Server",
    "vendor": "BlackBerry",
    "versions": [
      {
        "status": "affected",
        "version": "BlackBerry Workspaces Server components Appliance-X 1.11.0 to 1.11.2, vApp versions 5.6.0 to 5.6.6, and vApp versions 5.5.9 and earlier"
      }
    ]
  }
]

References

support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000045696