Information Disclosure Flaw in BlackBerry Good Control Server
CVE-2016-3127

7.5HIGH

Key Information:

Vendor

Blackberry

Status
BlackBerry Good Control Server versions earlier than 2.3.53.62
Vendor
CVE Published:
3 March 2017

What is CVE-2016-3127?

An information disclosure flaw in the logging mechanism of the BlackBerry Good Control Server allows remote attackers to exploit logged encryption keys. By accessing specific diagnostic log files, either through a valid login or an unrelated compromise of the server, attackers can gain unauthorized access to sensitive resources within a customer's Good deployment. This vulnerability poses a significant risk to data confidentiality and overall system security.

Affected Version(s)

BlackBerry Good Control Server earlier than 2.3.53.62 BlackBerry Good Control Server versions earlier than 2.3.53.62

References

http://www.securityfocus.com/bid/96629
vdb-entryx_refsource_BID
http://support.blackberry.com/kb/articleDetail?articleNum...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.