Skip to content
OpenAdvisories
Medium · 5.0 CVE-2025-12766 EUVD-2025-198204GHSA-f33w-45gj-vcrx

Insecure Direct Object Reference (IDOR) vulnerability in the Management Console of affected versions of BlackBerry AtHoc.

Published Nov 19, 2025 · Updated Nov 19, 2025 · Assigned by blackberry

Description

An Insecure Direct Object Reference (IDOR) vulnerability in the Management Console of BlackBerry® AtHoc® (OnPrem) version 7.21 could allow an attacker to potentially gain unauthorized knowledge about other organizations hosted on the same Interactive Warning System (IWS).

Affected products

VendorProductAffectedFixed
BlackBerry BlackBerry® AtHoc® (OnPrem) 7.21 —

References