CVE:CVE-2014-1467
CNNVD:CNNVD-201402-183
BlackBerry Enterprise Service（BES）等都是加拿大黑莓（BlackBerry）公司的移动设备管理平台。该平台可通过统一的界面管理和保护BlackBerry、iOS和Android设备。
多款BlackBerry产品中存在信息泄露漏洞，该漏洞源于程序以明文记录凭证。攻击者可通过读取日志文件利用该漏洞获取敏感信息。以下版本受到影响：BlackBerry Enterprise Service 10至10.2.0版本，Universal Device Service 6版本，Enterprise Server Express for Domino 5.0.4及之前的版本，Enterprise Server Express for Exchange 5.0.4及之前的版本，Enterprise Server for Domino 5.0.4 MR6及之前的版本，Enterprise Server for Exchange 5.0.4 MR6及之前的版本，Enterprise Server for GroupWise 5.0.4 MR6及之前的版本。
solution:Upgrade blackberry blackberry_enterprise_service to a higher version than 10.0,10.1.0,10.1.2,10.2.0,and avoid the version 10.0,10.1.0,10.1.2,10.2.0; Upgrade blackberry blackberry_universal_device_service to a higher version than 6.0,and avoid the version 6.0; Upgrade blackberry enterprise_server to a higher version than *:mr6,and avoid the version *:mr6; Upgrade blackberry enterprise_server_express to a higher version than 5.0.4,and avoid the version (,5.0.4]