CVE-2016-3129

EPSS 1.93%
Veröffentlicht 16.12.2016 09:59:00
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle secure@blackberry.com
CVE-Watchlists
Login
Unerledigt
Login

A remote shell execution vulnerability in the BlackBerry Good Enterprise Mobility Server (GEMS) implementation of the Apache Karaf command shell in GEMS versions 2.1.5.3 to 2.2.22.25 allows remote attackers to obtain local administrator rights on the GEMS server via commands executed on the Karaf command shell.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Blackberry ≫ Good Enterprise Mobility Server Version <= 2.2.22.25

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.93%	0.826

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.6	0.7	5.9	CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	8.5	6.8	10	AV:N/AC:M/Au:S/C:C/I:C/A:C

http://support.blackberry.com/kb/articleDetail?articleNumber=000038814&language=None

Vendor Advisory

http://www.securityfocus.com/bid/94959

https://nvd.nist.gov/vuln/detail/CVE-2016-3129

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-3129

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-3129

EUVD