CVE-2017-9367

BlackBerry Workspaces Server contains a directory traversal vulnerability that can be exploited via a manipulated POST URL to execute or upload arbitrary files and disclose arbitrary content on the web server. Affected: BlackBerry Workspaces Server (path traversal in POST handling). Root cause: i...

CVE-2017-9368

CVE-2017-9368 affects BlackBerry Workspaces Server. An information disclosure vulnerability allows an attacker to gain access to source code for server‑side applications by crafting requests for specific files. Exploitation is shown as network‑accessible with low attack complexity and no authenti...