CVE-2017-9368 An information disclosure vulnerability in the BlackBerry Workspaces Server could result in an attacker gaining access to source code for server-side applications by crafting a request for specific fi...
HighCVSS 7.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An information disclosure vulnerability in the BlackBerry Workspaces Server could result in an attacker gaining access to source code for server-side applications by crafting a request for specific files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| blackberry workspaces vapp | = 5.5.0 | No fix listed |
| blackberry workspaces vapp | = 5.5.1 | No fix listed |
| blackberry workspaces vapp | = 5.5.2 | No fix listed |
| blackberry workspaces vapp | = 5.5.3 | No fix listed |
| blackberry workspaces vapp | = 5.5.4 | No fix listed |
| blackberry workspaces vapp | = 5.5.5 | No fix listed |
| blackberry workspaces vapp | = 5.5.6 | No fix listed |
| blackberry workspaces vapp | = 5.5.7 | No fix listed |
| blackberry workspaces vapp | = 5.5.8 | No fix listed |
| blackberry workspaces vapp | = 5.5.9 | No fix listed |
| blackberry workspaces vapp | = 5.6.0 | No fix listed |
| blackberry workspaces vapp | = 5.6.1 | No fix listed |
| blackberry workspaces vapp | = 5.6.2 | No fix listed |
| blackberry workspaces vapp | = 5.6.3 | No fix listed |
| blackberry workspaces vapp | = 5.6.4 | No fix listed |
| blackberry workspaces vapp | = 5.6.5 | No fix listed |
| blackberry workspaces vapp | = 5.6.6 | No fix listed |
| blackberry workspaces appliance-x | <= 1.11.2 | No fix listed |
| blackberry workspaces server | = BlackBerry Workspaces Server components Appliance-X 1.11.0 to 1.11.2, vApp versions 5.6.0 to 5.6.6, and vApp versions 5.5.9 and earlier | No fix listed |
References
- support.blackberry.com vendor-advisory
- 96542 third-party-advisory vdb-entry