CVE-2016-3130
Summary
| CVE | CVE-2016-3130 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-01-13 09:59:00 UTC |
| Updated | 2017-02-03 02:59:00 UTC |
| Description | An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to obtain local or domain credentials of an administrator or user account by sniffing traffic between the two elements during a login attempt. |
Risk And Classification
Problem Types: CWE-255 | CWE-200
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Blackberry | Enterprise Service | 12.0.0 | All | All | All |
| Application | Blackberry | Enterprise Service | 12.0.1 | All | All | All |
| Application | Blackberry | Enterprise Service | 12.1.0 | All | All | All |
| Application | Blackberry | Enterprise Service | 12.2.0 | All | All | All |
| Application | Blackberry | Enterprise Service | 12.2.1 | All | All | All |
| Application | Blackberry | Enterprise Service | 12.3.0 | All | All | All |
| Application | Blackberry | Enterprise Service | 12.3.1 | All | All | All |
| Application | Blackberry | Enterprise Service | 12.4.0 | All | All | All |
| Application | Blackberry | Enterprise Service | 12.4.1 | All | All | All |
| Application | Blackberry | Enterprise Service | 12.5.0a | All | All | All |
| Application | Blackberry | Enterprise Service | 12.5.1 | All | All | All |
| Application | Blackberry | Enterprise Service | 12.5.2 | All | All | All |
| Application | Blackberry | Enterprise Service | 12.0.0 | All | All | All |
| Application | Blackberry | Enterprise Service | 12.0.1 | All | All | All |
| Application | Blackberry | Enterprise Service | 12.1.0 | All | All | All |
| Application | Blackberry | Enterprise Service | 12.2.0 | All | All | All |
| Application | Blackberry | Enterprise Service | 12.2.1 | All | All | All |
| Application | Blackberry | Enterprise Service | 12.3.0 | All | All | All |
| Application | Blackberry | Enterprise Service | 12.3.1 | All | All | All |
| Application | Blackberry | Enterprise Service | 12.4.0 | All | All | All |
| Application | Blackberry | Enterprise Service | 12.4.1 | All | All | All |
| Application | Blackberry | Enterprise Service | 12.5.0a | All | All | All |
| Application | Blackberry | Enterprise Service | 12.5.1 | All | All | All |
| Application | Blackberry | Enterprise Service | 12.5.2 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| BSRT-2017-002 Information disclosure vulnerability affects BES12 | CONFIRM | support.blackberry.com | |
| BlackBerry Enterprise Server CVE-2016-3130 Information Disclosure Vulnerability | BID | www.securityfocus.com | |
| BlackBerry Enterprise Server Flaw Lets Remote Users Obtain User Login Credentials in Certain Cases - SecurityTracker | SECTRACK | www.securitytracker.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.