VULNERABILITY INTELLIGENCE
CVE-2017-9370
CVSS score8.8 HIGH
EPSS probability0.86%
CISA KEVNot currently listed
Published2017-08-09
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
An information disclosure / elevation of privilege vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker who has legitimate access to BlackBerry Workspaces to gain access to another user's workspace by making multiple login requests to the server.
Weakness classification
- CWE-287: Improper Authentication
Primary references
- secure@blackberry.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory