VYPR
← All advisories
Medium severity6.6NVD Advisory· Published Dec 16, 2016· Updated Jun 17, 2026

CVE-2016-3129

CVE-2016-3129

Description

A remote shell execution vulnerability in the BlackBerry Good Enterprise Mobility Server (GEMS) implementation of the Apache Karaf command shell in GEMS versions 2.1.5.3 to 2.2.22.25 allows remote attackers to obtain local administrator rights on the GEMS server via commands executed on the Karaf command shell.

Affected products

2
  • Blackberry/Good Enterprise Mobility Server2 versions
    cpe:2.3:o:blackberry:good_enterprise_mobility_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:blackberry:good_enterprise_mobility_server:*:*:*:*:*:*:*:*range: <=2.2.22.25
    • (no CPE)range: 2.1.5.3 to 2.2.22.25

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.