CVE-2017-9368

Description

An information disclosure vulnerability in the BlackBerry Workspaces Server could result in an attacker gaining access to source code for server-side applications by crafting a request for specific files.

Affected products

• BlackBerry / Workspaces ServerBlackBerry Workspaces Server components Appliance-X 1.11.0 to 1.11.2, vApp versions 5.6.0 to 5.6.6, and vApp versions 5.5.9 and earlier – BlackBerry Workspaces Server components Appliance-X 1.11.0 to 1.11.2, vApp versions 5.6.0 to 5.6.6, and vApp versions 5.5.9 and earlier

References

• MISChttp://www.securityfocus.com/bid/96542
• MISChttp://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000045696