1. Home
  2. CVE Database
  3. CVE-2017-9370
HIGH · 8.8

CVE-2017-9370

An information disclosure / elevation of privilege vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker who has legitimate access to BlackBerry Workspaces to gain acce...

Vulnerability Description

An information disclosure / elevation of privilege vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker who has legitimate access to BlackBerry Workspaces to gain access to another user's workspace by making multiple login requests to the server.

CVSS Score

8.8

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
BlackberryWorkspaces-

Related Weaknesses (CWE)

CWE-287

References

FAQ

What is CVE-2017-9370?

CVE-2017-9370 is a vulnerability with a CVSS score of 8.8 (HIGH). An information disclosure / elevation of privilege vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker who has legitimate access to BlackBerry Workspaces to gain acce...

How severe is CVE-2017-9370?

CVE-2017-9370 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-9370?

Check the references section above for vendor advisories and patch information. Affected products include: Blackberry Workspaces.