VYPR
← All advisories
Critical severity10.0NVD Advisory· Published Aug 12, 2020· Updated Jun 17, 2026

CVE-2020-6932

CVE-2020-6932

Description

An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow an attacker to potentially read arbitrary files and run arbitrary executables in the context of the web server.

Affected products

3
  • Blackberry/Qnx Software Development Platform3 versions
    cpe:2.3:a:blackberry:qnx_software_development_platform:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:blackberry:qnx_software_development_platform:*:*:*:*:*:*:*:*range: >=6.4.0,<=6.6.0
    • (no CPE)range: 6.4.0 - 6.6.0
    • (no CPE)range: 6.4.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.