Information Disclosure Flaw in BlackBerry Good Control Server
CVE-2016-3127

7.5HIGH

Key Information:

Vendor

Blackberry

Status
BlackBerry Good Control Server versions earlier than 2.3.53.62
Vendor
CVE Published:
3 March 2017

What is CVE-2016-3127?

An information disclosure flaw in the logging mechanism of the BlackBerry Good Control Server allows remote attackers to exploit logged encryption keys. By accessing specific diagnostic log files, either through a valid login or an unrelated compromise of the server, attackers can gain unauthorized access to sensitive resources within a customer's Good deployment. This vulnerability poses a significant risk to data confidentiality and overall system security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

BlackBerry Good Control Server earlier than 2.3.53.62 BlackBerry Good Control Server versions earlier than 2.3.53.62

References

http://www.securityfocus.com/bid/96629
vdb-entryx_refsource_BID
http://support.blackberry.com/kb/articleDetail?articleNum...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.