Workspaces Server vulnerabilities

2 known vulnerabilities in Workspaces Server from BlackBerry. 1 is rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 6.5 Medium severity

  SaltStack Salt Path Traversal Exploited

  CVE-2020-11652Apr 30, 2020SaltstackEPSS 86.4%

  An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that improperly sanitize paths. These methods allow arbitrary directory access to authenticated users.

• 9.8 Critical severity

  Apache Tomcat Improper Privilege Management Exploited

  CVE-2020-1938Feb 24, 2020ApacheEPSS 99.3%

  When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attac