BlackBerry Enterprise Service 12.3.1 index.jsp/loggedOut.jsp locale cross site scripting

Summaryinfo

A vulnerability marked as problematic has been reported in BlackBerry Enterprise Service 12.3.1. This issue affects some unknown processing of the file index.jsp/loggedOut.jsp. This manipulation of the argument locale causes cross site scripting. This vulnerability is registered as CVE-2016-1915. Remote exploitation of the attack is possible. Furthermore, an exploit is available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability has been found in BlackBerry Enterprise Service 12.3.1 and classified as problematic. Affected by this vulnerability is an unknown code of the file index.jsp/loggedOut.jsp. The manipulation of the argument locale with an unknown input leads to a cross site scripting vulnerability. The CWE definition for the vulnerability is CWE-79. The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. As an impact it is known to affect confidentiality, integrity, and availability.

The weakness was published 02/19/2016 as 000038033 as confirmed mailinglist post (Full-Disclosure). The advisory is shared at seclists.org. This vulnerability is known as CVE-2016-1915 since 01/15/2016. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. It demands that the victim is doing some kind of user interaction. Technical details and also a public exploit are known. MITRE ATT&CK project uses the attack technique T1059.007 for this issue.

It is possible to download the exploit at exploit-db.com. It is declared as proof-of-concept. By approaching the search of inurl:index.jsp/loggedOut.jsp it is possible to find vulnerable targets with Google Hacking. The vulnerability scanner Nessus provides a plugin with the ID 88881 (BlackBerry Enterprise Service Multiple Vulnerabilities (BSRT-2016-001)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Windows and running in the context l. The code used by the exploit is:

https://<server>/mydevice/index.jsp?locale="><script>alert(1)</script>
https://<server>/mydevice/loggedOut.jsp?locale="><script>alert(1)</script>

Upgrading eliminates this vulnerability. A possible mitigation has been published even before and not after the disclosure of the vulnerability.

The vulnerability is also documented in the databases at X-Force (110861), Exploit-DB (39481) and Tenable (88881). Similar entry is available at VDB-81086. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• BlackBerry

Name

• Enterprise Service

Version

• 12.3.1

License

• commercial

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion