CVE-2016-3129

A remote shell execution vulnerability in the BlackBerry Good Enterprise Mobility Server (GEMS) implementation of the Apache Karaf command shell in GEMS versions 2.1.5.3 to 2.2.22.25 allows remote attackers to obtain local administrator rights on the GEMS server via commands executed on the Karaf command shell.

CVSS v3 6.6 MEDIUM
CVSS v2.0 8.5 HIGH

6.6^/10

CVSS v3 : MEDIUM

Vector : AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability : 0.7 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

8.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:S/C:C/I:C/A:C

Exploitability : 6.8 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://support.blackberry.com/kb/articleDetail?articleNumber=000038814&language=None	Vendor Advisory
http://www.securityfocus.com/bid/94959

Configurations

Configuration 1 (hide)

cpe:2.3:o:blackberry:good_enterprise_mobility_server:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2016-12-16 09:59

Updated : 2016-12-22 03:00

NVD link : CVE-2016-3129

Mitre link : CVE-2016-3129

CVE.ORG link : CVE-2016-3129

JSON object : View

Products Affected

blackberry

good_enterprise_mobility_server

CWE

NVD-CWE-noinfo

{"id": "CVE-2016-3129", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 8.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 6.6, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.7}]}, "published": "2016-12-16T09:59:00.200", "references": [{"url": "http://support.blackberry.com/kb/articleDetail?articleNumber=000038814&language=None", "tags": ["Vendor Advisory"], "source": "secure@blackberry.com"}, {"url": "http://www.securityfocus.com/bid/94959", "source": "secure@blackberry.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "A remote shell execution vulnerability in the BlackBerry Good Enterprise Mobility Server (GEMS) implementation of the Apache Karaf command shell in GEMS versions 2.1.5.3 to 2.2.22.25 allows remote attackers to obtain local administrator rights on the GEMS server via commands executed on the Karaf command shell."}, {"lang": "es", "value": "Una vulnerabilidad de ejecuci\u00f3n shell en la implementaci\u00f3n BlackBerry Good Enterprise Mobility Server (GEMS) del comando shell Apache Karaf en GEMS en las versiones 2.1.5.3 hasta 2.2.22.25 permite a atacantes remotos obtener derechos de administrador local en el servidor GEMS a trav\u00e9s de comandos ejecutados en el comando shell Karaf."}], "lastModified": "2016-12-22T03:00:19.857", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:blackberry:good_enterprise_mobility_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "396E10E8-4D3F-461A-848D-6B7556F56C31", "versionEndIncluding": "2.2.22.25"}], "operator": "OR"}]}], "sourceIdentifier": "secure@blackberry.com"}