Lucene search

BlackberryCVELIST:CVE-2023-21521

HistorySep 12, 2023 - 6:18 p.m.

CVE-2023-21521

2023-09-1218:18:34

blackberry

www.cve.org

sql injection

blackberry athoc

management console

data modification

administration operations

file system access

operating system commands

cve-2023-21521

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

32.9%

JSON

An SQL Injection vulnerability in the Management Console  (Operator Audit Trail) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially read sensitive data from the database, modify database data (Insert/Update/Delete), execute administration operations on the database, recover the content of a given file present on the DBMS file system and in some cases issue commands to the operating system.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "AtHoc",
    "vendor": "BlackBerry",
    "versions": [
      {
        "status": "affected",
        "version": "7.15"
      }
    ]
  }
]

References

support.blackberry.com/kb/articleDetail?articleNumber=000112406