CVE-2014-2388

The Storage and Access service in BlackBerry OS 10.x before 10.2.1.1925 on Q5, Q10, Z10, and Z30 devices does not enforce the password requirement for SMB filesystem access, which allows context-dependent attackers to read arbitrary files via 1 a session over a Wi-Fi network or 2 a session over a...

CVE-2014-2388

CVE-2014-2388 is an authentication-by-pass vulnerability in BlackBerry OS 10.x prior to 10.2.1.1925 affecting the Storage and Access service (Samba-based file sharing) on Q5, Q10, Z10, and Z30. The root cause, as described in vendor advisories, is that the file-service does not enforce a password...

PT-2014-4672

Name of the Vulnerable Software and Affected Versions BlackBerry OS versions prior to 10.2.1.1925 Description The issue concerns the Storage and Access service, which fails to enforce password requirements for SMB filesystem access. This allows attackers to read arbitrary files under certain...

CVE-2014-2388: Undefined Security Weakness

The Storage and Access service in BlackBerry OS 10.x before 10.2.1.1925 on Q5, Q10, Z10, and Z30 devices does not enforce the password requirement for SMB filesystem access, which allows context-dependent attackers to read arbitrary files via 1 a session over a Wi-Fi network or 2 a session over a...

BlackBerry Z10 Authentication Bypass

--------------------------------------------------------------------- modzero Security Advisory: BlackBerry Z 10 - Storage and Access File-Exchange Authentication By-Pass MZ-13-04 ---------------------------------------------------------------------...