CVEvulnerability

CVE-2016-3129

6.6 MEDIUM Published 2016-12-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-12-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.6 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
8.5 HIGH — AV:N/AC:M/Au:S/C:C/I:C/A:C

Description

A remote shell execution vulnerability in the BlackBerry Good Enterprise Mobility Server (GEMS) implementation of the Apache Karaf command shell in GEMS versions 2.1.5.3 to 2.2.22.25 allows remote attackers to obtain local administrator rights on the GEMS server via commands executed on the Karaf command shell.

Affected configurations

• blackberry good enterprise mobility server (<= 2.2.22.25)

References