Back to Database
Status published
High
CVE-2018-8890
An information disclosure vulnerability in the Management Console of BlackBerry...
Vulnerability Description
An information disclosure vulnerability in the Management Console of BlackBerry UEM 12.8.0 and 12.8.1 could allow an attacker to take over a UEM user's session and perform administrative actions in the context of the user.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-8890
Credits & Attribution
No credits recorded in the NVD database.
More from BlackBerry
View All →CVE-2025-2474
Vulnerability in PCX Image Codec Impacts QNX Software Development Platform
Critical
9.8
CVE-2025-12766
Insecure Direct Object Reference (IDOR) vulnerability in the Management Console of affected versions of BlackBerry AtHoc.
Medium
5
CVE-2024-51723
Vulnerability in Management Console Impacts BlackBerry AtHoc
Medium
4.6
CVE-2024-51722
Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE
Medium
6.4
CVE-2024-51721
Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE
High
7.3
Affected Vendor
BlackBerry
View all reports →Affected Software
UEM
Vulnerable Versions:
12.8.0 and 12.8.1
Timeline
Official Publish:
October 12th, 2018
Last Modified:
September 16th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.