CVE-2014-1467

published 2014-02-14

CVE-2014-1467: BlackBerry Enterprise Service 10 before 10.2.1, Universal Device Service 6, Enterprise Server Express for Domino through 5.0.4, Enterprise Server Express for…

Priority P4 23 medium 5 CVSS 2.0

AV N AC L Au N C P I N A N

BlackBerry Enterprise Service 10 before 10.2.1, Universal Device Service 6, Enterprise Server Express for Domino through 5.0.4, Enterprise Server Express for Exchange through 5.0.4, Enterprise Server for Domino through 5.0.4 MR6, Enterprise Server for Exchange through 5.0.4 MR6, and Enterprise Server for GroupWise through 5.0.4 MR6 log cleartext credentials during exception handling, which might allow context-dependent attackers to obtain sensitive information by reading a log file.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
blackberry	blackberry_enterprise_service	—	—
blackberry	blackberry_enterprise_service	—	—
blackberry	blackberry_enterprise_service	—	—
blackberry	blackberry_enterprise_service	—	—
blackberry	blackberry_universal_device_service	—	—
blackberry	enterprise_server	<= 5.0.4	—
blackberry	enterprise_server_express	<= 5.0.4	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-255