A PII Enumeration via Credential Recovery in the Self Service (Credential Recovery) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially associate a list of contact details with an AtHoc IWS organization.
| Software | From | Fixed in |
|---|---|---|
| blackberry / athoc | 7.15 | 7.15.x |