Unscored severity · published Feb 14, 2014
CVE-2014-1467
BlackBerry Enterprise Service 10 before 10.2.1, Universal Device Service 6, Enterprise Server Express for Domino through 5.0.4, Enterprise Server Express for Exchange through…
–
CVSS
1.3%
EPSS
No
On KEV
Description
BlackBerry Enterprise Service 10 before 10.2.1, Universal Device Service 6, Enterprise Server Express for Domino through 5.0.4, Enterprise Server Express for Exchange through 5.0.4, Enterprise Server for Domino through 5.0.4 MR6, Enterprise Server for Exchange through 5.0.4 MR6, and Enterprise Server for GroupWise through 5.0.4 MR6 log cleartext credentials during exception handling, which might allow context-dependent attackers to obtain sensitive information by reading a log file.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BE
Blackberry Enterprise Service · Blackberry
10.0; 10.1.0; 10.1.2; 10.2.0 · source: NVD
BU
Blackberry Universal Device Service · Blackberry
6.0 · source: NVD
ES
Enterprise Server · Blackberry
through 5.0.4; through 5.0.4; through 5.0.4 · source: NVD
ES
Enterprise Server Express · Blackberry
through 5.0.4; through 5.0.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-1467
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-1467
Vendor Advisory
http://www.blackberry.com/btsc/KB35647
More from Blackberry Enterprise Service
8.8
CVE-2016-1914
Multiple SQL injection vulnerabilities in the com.rim.mdm.ui.server.ImageServlet servlet in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers…
6.1
CVE-2016-1915
Multiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to inject arbitrary web script or…
–
CVE-2014-1469
BlackBerry Enterprise Server 5.x before 5.0.4 MR7 and Enterprise Service 10.x before 10.2.2 log cleartext credentials during exception handling, which allows local users to obtain…
–
CVE-2013-3693
The BlackBerry Universal Device Service in BlackBerry Enterprise Service (BES) 10.0 through 10.1.2 does not properly restrict access to the JBoss Remote Method Invocation (RMI)…