CVE-2016-3130

Severity: high (CVSS 8.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-01-13 · updated 2026-06-17
Weakness: CWE-200

Description

An information disclosure vulnerability in the Core and Management Console in BlackBerry Enterprise Server (BES) 12 through 12.5.2 allows remote attackers to obtain local or domain credentials of an administrator or user account by sniffing traffic between the two elements during a login attempt.

Affected products

BlackBerry Enterprise Service: 12.0.0, 12.0.1, 12.1.0, 12.2.0, 12.2.1, 12.3.0 (+6)

References

http://support.blackberry.com/kb/articleDetail?articleNumber=000038914
http://www.securityfocus.com/bid/95924
http://www.securitytracker.com/id/1037584
http://support.blackberry.com/kb/articleDetail?articleNumber=000038914
http://www.securityfocus.com/bid/95924
http://www.securitytracker.com/id/1037584

Get alerted when CVE-2016-3130 or the next vulnerability affects your stack