CVE-2013-6798

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-11-18 · updated 2026-06-17
Weakness: CWE-264

Description

BlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 build 39 on Mac OS X does not properly determine the user account for execution of Peer Manager in certain situations involving successive logins with different accounts, which allows context-dependent attackers to bypass intended restrictions on remote file-access folders via IPv6 WebDAV requests, a different vulnerability than CVE-2013-3694.

Affected products

Blackberry Link: through 1.2.0.28; through 1.1.1.26; 1.0.1.12, 1.1.1.26, 1.1.1.41, 1.2.0.12

References

http://www.blackberry.com/btsc/KB35315
https://exchange.xforce.ibmcloud.com/vulnerabilities/89202
http://www.blackberry.com/btsc/KB35315
https://exchange.xforce.ibmcloud.com/vulnerabilities/89202

Get alerted when CVE-2013-6798 or the next vulnerability affects your stack