VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Oct 16, 2017· Updated Jun 17, 2026

CVE-2017-9367

CVE-2017-9367

Description

A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary files, or reveal the content of arbitrary files anywhere on the web server by crafting a URL with a manipulated POST request.

Affected products

19
  • Blackberry/Workspaces Appliance X
    cpe:2.3:a:blackberry:workspaces_appliance-x:*:*:*:*:*:*:*:*
    Range: <=1.11.2
  • Blackberry/Workspaces Vapp17 versions
    cpe:2.3:a:blackberry:workspaces_vapp:5.5.0:*:*:*:*:*:*:*+ 16 more
    • cpe:2.3:a:blackberry:workspaces_vapp:5.5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.5.1:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.5.2:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.5.4:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.5.5:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.5.6:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.5.7:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.5.8:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.5.9:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.6.0:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.6.2:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.6.3:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.6.4:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.6.5:*:*:*:*:*:*:*
    • cpe:2.3:a:blackberry:workspaces_vapp:5.6.6:*:*:*:*:*:*:*
  • Blackberry/Workspacescpe-rescue
    Range: BlackBerry Workspaces Server components Appliance-X 1.11.0 to 1.11.2, vApp versions 5.6.0 to 5.6.6, and vApp versions 5.5.9 and earlier

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.