VYPR
Get started
← All advisories
Critical severity9.8NVD Advisory· Published Oct 16, 2017· Updated May 13, 2026

CVE-2017-9367

CVE-2017-9367

Description

A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary files, or reveal the content of arbitrary files anywhere on the web server by crafting a URL with a manipulated POST request.

Affected products

19
  • Blackberry/Workspaces Vapp17 versions
    cpe:2.3:a:blackberry:workspaces_vapp:5.5.0:*:*:*:*:*:*:*+ 16 more
    • cpe:2.3:a:blackberry:workspaces_vapp:5.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.5.4:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.5.5:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.5.6:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.5.7:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.5.8:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.5.9:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.6.3:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.6.4:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.6.5:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.6.6:*:*:*:*:*:*:*
  • Blackberry/Workspaces Appliance X
    cpe:2.3:a:blackberry:workspaces_appliance-x:*:*:*:*:*:*:*:*
    Range: <=1.11.2
  • BlackBerry/Workspaces Serverv5
    Range: BlackBerry Workspaces Server components Appliance-X 1.11.0 to 1.11.2, vApp versions 5.6.0 to 5.6.6, and vApp versions 5.5.9 and earlier

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.