Security Advisory

CVE-2013-3693

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-10-11 22:00:00
Last updated 2024-09-16 23:16:47
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The BlackBerry Universal Device Service in BlackBerry Enterprise Service (BES) 10.0 through 10.1.2 does not properly restrict access to the JBoss Remote Method Invocation (RMI) interface, which allows remote attackers to upload and execute arbitrary packages via a request to port 1098.