description:
A PII Enumeration via Credential Recovery in the Self Service (Credential Recovery) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially associate a list of contact details with an AtHoc IWS organization.
affected:
{
defaultStatus: unaffected
product: AtHoc
vendor: BlackBerry
versions:
status: affected, version: 7.15
}