CVE-2017-9367: Path Traversal
A directory traversal vulnerability in the BlackBerry Workspaces Server could potentially allow an attacker to execute or upload arbitrary files, or reveal the content of arbitrary files anywhere on the web server by crafting a URL with a manipulated POST request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9367?
CVE-2017-9367 has been assigned a high severity rating due to its potential impact on security through directory traversal.
How do I fix CVE-2017-9367?
To fix CVE-2017-9367, apply the latest security updates provided by BlackBerry for the affected versions listed in the advisory.
Which versions of BlackBerry Workspaces are affected by CVE-2017-9367?
CVE-2017-9367 affects BlackBerry Workspaces Vapp versions 5.5.0 to 5.6.6 and the Appliance-x versions up to 1.11.2.
What type of attack does CVE-2017-9367 enable?
CVE-2017-9367 enables directory traversal attacks that can allow attackers to execute or upload arbitrary files on the server.
Is CVE-2017-9367 being actively exploited?
While there is no specific indication of active exploitation, the nature of CVE-2017-9367 makes it a potential target for attackers.