Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-1467

BlackBerry Enterprise Service 10 before 10.2.1, Universal Device Service 6, Enterprise Server Express for Domino through 5.0.4, Enterprise Server Express for Exchange through 5.0.4, Enterprise Server for Domino through 5.0.4 MR6, Enterprise Server for Exchange through 5.0.4 MR6, and Enterprise Server for GroupWise through 5.0.4 MR6 log cleartext credentials during exception handling, which might allow context-dependent attackers to obtain sensitive information by reading a log file.

Published

2014-02-14T13:10:30.637

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-255
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application blackberry blackberry_enterprise_service 10.0 Yes
Application blackberry blackberry_enterprise_service 10.1.0 Yes
Application blackberry blackberry_enterprise_service 10.1.2 Yes
Application blackberry blackberry_enterprise_service 10.2.0 Yes
Application blackberry blackberry_universal_device_service 6.0 Yes
Application blackberry enterprise_server ≤ 5.0.4 Yes
Application blackberry enterprise_server ≤ 5.0.4 Yes
Application blackberry enterprise_server ≤ 5.0.4 Yes
Application blackberry enterprise_server_express ≤ 5.0.4 Yes
Application blackberry enterprise_server_express ≤ 5.0.4 Yes
References