CVE-2021-22152
Summary
| CVE | CVE-2021-22152 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-05-13 11:15:00 UTC |
| Updated | 2021-05-21 18:23:00 UTC |
| Description | A Denial of Service due to Improper Input Validation vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially to prevent any new user connections. |
Risk And Classification
Problem Types: CWE-20
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Blackberry | Unified Endpoint Management | 12.12.1a | quick_fix_1 | All | All |
| Application | Blackberry | Unified Endpoint Management | 12.12.1a | quick_fix_2 | All | All |
| Application | Blackberry | Unified Endpoint Management | 12.12.1a | quick_fix_3 | All | All |
| Application | Blackberry | Unified Endpoint Management | 12.12.1a | quick_fix_4 | All | All |
| Application | Blackberry | Unified Endpoint Management | 12.12.1a | quick_fix_5 | All | All |
| Application | Blackberry | Unified Endpoint Management | 12.12.1a | quick_fix_6 | All | All |
| Application | Blackberry | Unified Endpoint Management | 12.13.0 | - | All | All |
| Application | Blackberry | Unified Endpoint Management | 12.13.0 | mr1 | All | All |
| Application | Blackberry | Unified Endpoint Management | 12.13.1 | quick_fix_1 | All | All |
| Application | Blackberry | Unified Endpoint Management | 12.13.1 | quick_fix_2 | All | All |
| Application | Blackberry | Unified Endpoint Management | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| BSRT-2021-002 Vulnerabilities in the Management Console Impact BlackBerry UEM | MISC | support.blackberry.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.