CVE-2017-9367

BlackBerry Workspaces Server contains a directory traversal vulnerability that can be exploited via a manipulated POST URL to execute or upload arbitrary files and disclose arbitrary content on the web server. Affected: BlackBerry Workspaces Server (path traversal in POST handling). Root cause: i...

CVE-2017-9368

CVE-2017-9368 affects BlackBerry Workspaces Server. An information disclosure vulnerability allows an attacker to gain access to source code for server‑side applications by crafting requests for specific files. Exploitation is shown as network‑accessible with low attack complexity and no authenti...

BlackBerry Workspaces Server Information Disclosure Vulnerability

BlackBerry Workspaces Server is a suite of file synchronization and sharing software from BlackBerry Canada. An information disclosure/privilege vulnerability exists in BlackBerry Workspaces Server. An attacker can exploit this vulnerability by submitting multiple login requests to the server to...

CVE-2017-9370

An information disclosure / elevation of privilege vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker who has legitimate access to BlackBerry Workspaces to gain access to another user's workspace by making multiple login requests to the server...

Privilege escalation

An information disclosure / elevation of privilege vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker who has legitimate access to BlackBerry Workspaces to gain access to another user's workspace by making multiple login requests to the server...

CVE-2017-9370

The connected records indicate a vulnerability in BlackBerry Workspaces Server described as information disclosure/elevation of privilege where an attacker with legitimate access can gain access to another user’s workspace by submitting multiple login requests to the server. Affected product/comp...