Unscored severity · published Aug 18, 2014
CVE-2014-1469
BlackBerry Enterprise Server 5.x before 5.0.4 MR7 and Enterprise Service 10.x before 10.2.2 log cleartext credentials during exception handling, which allows local users to obtain…
–
CVSS
0.4%
EPSS
No
On KEV
Description
BlackBerry Enterprise Server 5.x before 5.0.4 MR7 and Enterprise Service 10.x before 10.2.2 log cleartext credentials during exception handling, which allows local users to obtain sensitive information by reading the exception log file.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BE
Blackberry Enterprise Service · Blackberry
10.0; 10.1.0; 10.1.2; 10.2.0; 10.2.1 · source: NVD
ES
Enterprise Server · Blackberry
through 5.0.4; through 5.0.4; through 5.0.4 · source: NVD
ES
Enterprise Server Express · Blackberry
5.0.4; 5.0.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-1469
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-1469
secunia.com
http://secunia.com/advisories/60154
Patch
http://www.blackberry.com/btsc/KB36175
www.securityfocus.com
http://www.securityfocus.com/bid/69211
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/95264
More from Blackberry Enterprise Service
8.8
CVE-2016-1914
Multiple SQL injection vulnerabilities in the com.rim.mdm.ui.server.ImageServlet servlet in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers…
6.1
CVE-2016-1915
Multiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to inject arbitrary web script or…
–
CVE-2014-1467
BlackBerry Enterprise Service 10 before 10.2.1, Universal Device Service 6, Enterprise Server Express for Domino through 5.0.4, Enterprise Server Express for Exchange through…
–
CVE-2013-3693
The BlackBerry Universal Device Service in BlackBerry Enterprise Service (BES) 10.0 through 10.1.2 does not properly restrict access to the JBoss Remote Method Invocation (RMI)…