{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "A Denial of Service due to Improper Input Validation vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially to prevent any new user connections."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-05-13T10:43:47", "orgId": "dbe78b00-5e7b-4fda-8748-329789ecfc5c", "shortName": "blackberry"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://support.blackberry.com/kb/articleDetail?articleNumber=000078971"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secure@blackberry.com", "ID": "CVE-2021-22152", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A Denial of Service due to Improper Input Validation vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially to prevent any new user connections."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://support.blackberry.com/kb/articleDetail?articleNumber=000078971", "refsource": "MISC", "url": "https://support.blackberry.com/kb/articleDetail?articleNumber=000078971"}]}}}}, "cveMetadata": {"assignerOrgId": "dbe78b00-5e7b-4fda-8748-329789ecfc5c", "assignerShortName": "blackberry", "cveId": "CVE-2021-22152", "datePublished": "2021-05-13T10:43:47", "dateReserved": "2021-01-04T00:00:00", "dateUpdated": "2021-05-13T10:43:47", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:blackberry:unified_endpoint_management:*:*:*:*:*:*:*:*", "matchCriteriaId": "7BB3D5E6-0613-45E2-8575-07DD6CD77BF4", "versionEndIncluding": "12.12.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:blackberry:unified_endpoint_management:12.12.1a:quick_fix_1:*:*:*:*:*:*", "matchCriteriaId": "D6ED78FF-D486-4FE6-9599-7738729D8F28", "vulnerable": true}, {"criteria": "cpe:2.3:a:blackberry:unified_endpoint_management:12.12.1a:quick_fix_2:*:*:*:*:*:*", "matchCriteriaId": "593930DE-6A05-48B3-A886-87E72DDCD44C", "vulnerable": true}, {"criteria": "cpe:2.3:a:blackberry:unified_endpoint_management:12.12.1a:quick_fix_3:*:*:*:*:*:*", "matchCriteriaId": "A07E7ACB-B93D-4774-BFE2-8CEAE89AFDF8", "vulnerable": true}, {"criteria": "cpe:2.3:a:blackberry:unified_endpoint_management:12.12.1a:quick_fix_4:*:*:*:*:*:*", "matchCriteriaId": "984D7F36-D826-4D38-882C-9C822C4CDDA3", "vulnerable": true}, {"criteria": "cpe:2.3:a:blackberry:unified_endpoint_management:12.12.1a:quick_fix_5:*:*:*:*:*:*", "matchCriteriaId": "B5DC0EDB-41B6-4605-AF43-37A0701C96CE", "vulnerable": true}, {"criteria": "cpe:2.3:a:blackberry:unified_endpoint_management:12.12.1a:quick_fix_6:*:*:*:*:*:*", "matchCriteriaId": "03BB3AC1-DC2B-4871-A47C-23E5AFE8E72A", "vulnerable": true}, {"criteria": "cpe:2.3:a:blackberry:unified_endpoint_management:12.13.0:-:*:*:*:*:*:*", "matchCriteriaId": "925C2316-6DE8-40ED-AFF2-F4A9849D2B85", "vulnerable": true}, {"criteria": "cpe:2.3:a:blackberry:unified_endpoint_management:12.13.0:mr1:*:*:*:*:*:*", "matchCriteriaId": "B153A25D-8D7C-4734-8BB9-93C5E6385BE3", "vulnerable": true}, {"criteria": "cpe:2.3:a:blackberry:unified_endpoint_management:12.13.1:quick_fix_1:*:*:*:*:*:*", "matchCriteriaId": "36AFE854-85F3-4157-A2C5-8FE374485FF5", "vulnerable": true}, {"criteria": "cpe:2.3:a:blackberry:unified_endpoint_management:12.13.1:quick_fix_2:*:*:*:*:*:*", "matchCriteriaId": "61B8E4D4-E3DB-4693-BF88-513687E45BA2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A Denial of Service due to Improper Input Validation vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially to prevent any new user connections."}, {"lang": "es", "value": "Una Denegaci\u00f3n de Servicio debido a una vulnerabilidad de Comprobaci\u00f3n de entrada Inapropiada en el componente de la Consola de Administraci\u00f3n de BlackBerry UEM versi\u00f3n(s) 12.13.1 QF2 12.12.1 y anteriores y 12.12.1aQF6 y anteriores podr\u00eda permitir a un atacante impedir potencialmente cualquier conexi\u00f3n de usuario nuevo"}], "id": "CVE-2021-22152", "lastModified": "2021-05-21T18:23:15.633", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 2.1, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-05-13T11:15:07.923", "references": [{"source": "secure@blackberry.com", "tags": ["Vendor Advisory"], "url": "https://support.blackberry.com/kb/articleDetail?articleNumber=000078971"}], "sourceIdentifier": "secure@blackberry.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}