CVE-2021-22152: Input Validation
First published: Thu May 13 2021(Updated: )
A Denial of Service due to Improper Input Validation vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially to prevent any new user connections.
Credit: secure@blackberry.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Blackberry Unified Endpoint Management | <=12.12.0 | |
| Blackberry Unified Endpoint Management | =12.12.1a-quick_fix_1 | |
| Blackberry Unified Endpoint Management | =12.12.1a-quick_fix_2 | |
| Blackberry Unified Endpoint Management | =12.12.1a-quick_fix_3 | |
| Blackberry Unified Endpoint Management | =12.12.1a-quick_fix_4 | |
| Blackberry Unified Endpoint Management | =12.12.1a-quick_fix_5 | |
| Blackberry Unified Endpoint Management | =12.12.1a-quick_fix_6 | |
| Blackberry Unified Endpoint Management | =12.13.0 | |
| Blackberry Unified Endpoint Management | =12.13.0-mr1 | |
| Blackberry Unified Endpoint Management | =12.13.1-quick_fix_1 | |
| Blackberry Unified Endpoint Management | =12.13.1-quick_fix_2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2021-22152.
What is the severity level of CVE-2021-22152?
The severity level of CVE-2021-22152 is medium (5.5).
How does this vulnerability affect BlackBerry UEM?
This vulnerability affects BlackBerry UEM versions 12.13.1 QF2 and earlier, and 12.12.1a QF6 and earlier.
What is the impact of this vulnerability?
This vulnerability could allow an attacker to potentially prevent any new user connections.
How can I fix CVE-2021-22152?
To fix CVE-2021-22152, update BlackBerry UEM to version 12.13.1 QF3 or 12.12.1a QF7 or later.
- collector/nvd-index
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/blackberry
- canonical/blackberry unified endpoint management
- version/blackberry unified endpoint management/12.12.0
- version/blackberry unified endpoint management/12.12.1a-quick_fix_1
- version/blackberry unified endpoint management/12.12.1a-quick_fix_2
- version/blackberry unified endpoint management/12.12.1a-quick_fix_3
- version/blackberry unified endpoint management/12.12.1a-quick_fix_4
- version/blackberry unified endpoint management/12.12.1a-quick_fix_5
- version/blackberry unified endpoint management/12.12.1a-quick_fix_6
- version/blackberry unified endpoint management/12.13.0
- version/blackberry unified endpoint management/12.13.0-mr1
- version/blackberry unified endpoint management/12.13.1-quick_fix_1
- version/blackberry unified endpoint management/12.13.1-quick_fix_2