CVE-2021-22154

Published May 13, 2021

Last updated 2 years ago

Overview

Description: An Information Disclosure vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially gain access to a victim's web history.
Source: secure@blackberry.com
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 3.1

Type: Primary
Base score: 5.3
Impact score: 1.4
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Severity: MEDIUM

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:blackberry:unified_endpoint_management:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7BB3D5E6-0613-45E2-8575-07DD6CD77BF4",
            "versionEndIncluding": "12.12.0"
          },
          {
            "criteria": "cpe:2.3:a:blackberry:unified_endpoint_management:12.12.1a:quick_fix_1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D6ED78FF-D486-4FE6-9599-7738729D8F28"
          },
          {
            "criteria": "cpe:2.3:a:blackberry:unified_endpoint_management:12.12.1a:quick_fix_2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "593930DE-6A05-48B3-A886-87E72DDCD44C"
          },
          {
            "criteria": "cpe:2.3:a:blackberry:unified_endpoint_management:12.12.1a:quick_fix_3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A07E7ACB-B93D-4774-BFE2-8CEAE89AFDF8"
          },
          {
            "criteria": "cpe:2.3:a:blackberry:unified_endpoint_management:12.12.1a:quick_fix_4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "984D7F36-D826-4D38-882C-9C822C4CDDA3"
          },
          {
            "criteria": "cpe:2.3:a:blackberry:unified_endpoint_management:12.12.1a:quick_fix_5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B5DC0EDB-41B6-4605-AF43-37A0701C96CE"
          },
          {
            "criteria": "cpe:2.3:a:blackberry:unified_endpoint_management:12.12.1a:quick_fix_6:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "03BB3AC1-DC2B-4871-A47C-23E5AFE8E72A"
          },
          {
            "criteria": "cpe:2.3:a:blackberry:unified_endpoint_management:12.13.0:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "925C2316-6DE8-40ED-AFF2-F4A9849D2B85"
          },
          {
            "criteria": "cpe:2.3:a:blackberry:unified_endpoint_management:12.13.0:mr1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B153A25D-8D7C-4734-8BB9-93C5E6385BE3"
          },
          {
            "criteria": "cpe:2.3:a:blackberry:unified_endpoint_management:12.13.1:quick_fix_1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "36AFE854-85F3-4157-A2C5-8FE374485FF5"
          },
          {
            "criteria": "cpe:2.3:a:blackberry:unified_endpoint_management:12.13.1:quick_fix_2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "61B8E4D4-E3DB-4693-BF88-513687E45BA2"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 3.1

CVSS 2.0

Weaknesses

Configurations

References