CVEvulnerability
CVE-2014-1469
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-08-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.9 MEDIUM — AV:L/AC:L/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-310
Description
BlackBerry Enterprise Server 5.x before 5.0.4 MR7 and Enterprise Service 10.x before 10.2.2 log cleartext credentials during exception handling, which allows local users to obtain sensitive information by reading the exception log file.
Affected configurations
• blackberry blackberry enterprise service 10.0
• blackberry blackberry enterprise service 10.1.0
• blackberry blackberry enterprise service 10.1.2
• blackberry blackberry enterprise service 10.2.0
• blackberry blackberry enterprise service 10.2.1
• blackberry enterprise server (<= 5.0.4)
• blackberry enterprise server express 5.0.4
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/60154 secunia.com
- http://www.blackberry.com/btsc/KB36175 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/69211 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95264 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/60154 secunia.com
- http://www.blackberry.com/btsc/KB36175 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/69211 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95264 exchange.xforce.ibmcloud.com