CVE-2014-1469

medium

Description

BlackBerry Enterprise Server 5.x before 5.0.4 MR7 and Enterprise Service 10.x before 10.2.2 log cleartext credentials during exception handling, which allows local users to obtain sensitive information by reading the exception log file.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/95264

http://www.securityfocus.com/bid/69211

http://www.blackberry.com/btsc/KB36175

http://secunia.com/advisories/60154

Details

Source: Mitre, NVD

Published: 2014-08-18

Updated: 2017-08-29

Risk Information

CVSS v2

Base Score: 4.9

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.5

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N