CVE-2016-3130: Infoleak
An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to obtain local or domain credentials of an administrator or user account by sniffing traffic between the two elements during a login attempt.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-3130?
CVE-2016-3130 is considered a high severity vulnerability due to the potential for information disclosure involving user credentials.
How do I fix CVE-2016-3130?
To mitigate CVE-2016-3130, it is recommended to upgrade to a patched version of BlackBerry Enterprise Server beyond 12.5.2.
What type of vulnerability is CVE-2016-3130?
CVE-2016-3130 is an information disclosure vulnerability affecting the communication between the Core and Management Console of BlackBerry Enterprise Server.
What versions of BlackBerry Enterprise Server are affected by CVE-2016-3130?
BlackBerry Enterprise Server versions from 12.0.0 to 12.5.2 are affected by CVE-2016-3130.
Can CVE-2016-3130 be exploited remotely?
Yes, CVE-2016-3130 can be exploited remotely by attackers sniffing the traffic during a login attempt.