CVE-2020-6932

An information disclosure and remote code execution vulnerability in the slinger web server of the BlackBerry QNX Software Development Platform versions 6.4.0 to 6.6.0 could allow an attacker to potentially read arbitrary files and run arbitrary executables in the context of the web server.

Score

CVSS 3.1 10.0 Critical

Status

Modified - secure@blackberry.com

Published

2020-08-12

Last modified

2025-08-22

Weaknesses

CWE-150

Affected products

• Qnx Software Development Platform (Blackberry)
• Qnx Software Development Platform Sdp (Blackberry)

References

• http://support.blackberry.com/kb/articleDetail?articleNumber=000061411