CVE-2014-1467

EPSS 0.26%
Published 14.02.2014 13:10:30
Last modified 11.04.2025 00:51:21
Source cve@mitre.org
Teams watchlist Login
Open Login

BlackBerry Enterprise Service 10 before 10.2.1, Universal Device Service 6, Enterprise Server Express for Domino through 5.0.4, Enterprise Server Express for Exchange through 5.0.4, Enterprise Server for Domino through 5.0.4 MR6, Enterprise Server for Exchange through 5.0.4 MR6, and Enterprise Server for GroupWise through 5.0.4 MR6 log cleartext credentials during exception handling, which might allow context-dependent attackers to obtain sensitive information by reading a log file.

Affected products Warnungen 0 Metrics 2 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Blackberry ≫ Blackberry Enterprise Service Version10.0

Blackberry ≫ Blackberry Enterprise Service Version10.1.0

Blackberry ≫ Blackberry Enterprise Service Version10.1.2

Blackberry ≫ Blackberry Enterprise Service Version10.2.0

Blackberry ≫ Blackberry Universal Device Service Version6.0

Blackberry ≫ Enterprise Server Updatemr6 SwPlatformexchange_server Version <= 5.0.4

Blackberry ≫ Enterprise Server Updatemr6 SwPlatformgroupwise Version <= 5.0.4

Blackberry ≫ Enterprise Server Updatemr6 SwPlatformlotus_domino Version <= 5.0.4

Blackberry ≫ Enterprise Server Express SwPlatformexchange_server Version <= 5.0.4

Blackberry ≫ Enterprise Server Express SwPlatformlotus_domino Version <= 5.0.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.26%	0.467

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://www.blackberry.com/btsc/KB35647

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2014-1467

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2014-1467

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2014-1467

EUVD