VYPR
← All advisories
High severity8.1NVD Advisory· Published Jan 13, 2017· Updated Jun 17, 2026

CVE-2016-3130

CVE-2016-3130

Description

An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to obtain local or domain credentials of an administrator or user account by sniffing traffic between the two elements during a login attempt.

Affected products

13
  • Blackberry/Enterprise Service12 versions
    cpe:2.3:a:blackberry:enterprise_service:12.0.0:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:a:blackberry:enterprise_service:12.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:enterprise_service:12.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:enterprise_service:12.1.0:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:enterprise_service:12.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:enterprise_service:12.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:enterprise_service:12.3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:enterprise_service:12.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:enterprise_service:12.4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:enterprise_service:12.4.1:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:enterprise_service:12.5.0a:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:enterprise_service:12.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:enterprise_service:12.5.2:*:*:*:*:*:*:*
  • Blackberry/Enterprise Serverllm-fuzzy
    Range: <=12.5.2

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.