CVE-2018-8890: Infoleak
Published Oct 12, 2018
·Updated
An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over a UEM user's session and perform administrative actions in the context of the user.
Affected Software
2 affected components
BlackBerry Unified Endpoint Manager=12.8.0
BlackBerry Unified Endpoint Manager=12.8.1
Event History
Oct 12, 2018
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2018-8890?
CVE-2018-8890 is an information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1.
2
How can an attacker exploit CVE-2018-8890?
An attacker can exploit CVE-2018-8890 by taking over a UEM user's session and performing administrative actions in the context of the user.
3
What is the severity of CVE-2018-8890?
The severity of CVE-2018-8890 is high with a severity value of 7.5.
4
Which software versions are affected by CVE-2018-8890?
BlackBerry UEM versions 12.8.0 and 12.8.1 are affected by CVE-2018-8890.
5
How can I fix CVE-2018-8890?
To fix CVE-2018-8890, users should apply the necessary patches provided by BlackBerry.