CVE-2017-9367 Vulnerability Details

  /     /     /  

CVE-2017-9367 Metadata Quick Info

CVE Published: 16/10/2017 | CVE Updated: 16/09/2024 | CVE Year: 2017
Source: blackberry | Vendor: BlackBerry | Product: Workspaces Server
Status : PUBLISHED

---

CVE-2017-9367 Description

A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary files, or reveal the content of arbitrary files anywhere on the web server by crafting a URL with a manipulated POST request.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Directory traversal
Source: BlackBerry

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).