Information Disclosure and Local Privilege Escalation Vulnerability in BlackBerry QNX Software Development Platform

CVE-2019-8998 · MEDIUM Severity

AV:L/AC:L/AU:N/C:P/I:P/A:P

An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of BlackBerry QNX Software Development Platform version(s) 6.5.0 SP1 and earlier could allow an attacker to potentially gain unauthorized access to a chosen process address space.

Learn more about our Web Application Penetration Testing UK.