Vulnerability Details CVE-2018-8889
A directory traversal vulnerability in the Connect Service of the BlackBerry Enterprise Mobility Server (BEMS) 2.8.17.29 and earlier could allow an attacker to retrieve arbitrary files in the context of a BEMS administrator account.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 18.9%
CVSS Severity
CVSS v3 Score 4.7
CVSS v2 Score 4.7
References
Products affected by CVE-2018-8889
-
cpe:2.3:a:blackberry:enterprise_mobility_server:-
-
cpe:2.3:a:blackberry:enterprise_mobility_server:2.6
-
cpe:2.3:a:blackberry:enterprise_mobility_server:2.8
-
cpe:2.3:a:blackberry:enterprise_mobility_server:2.8.17.29