CVE-2009-0274: Infoleak

Published Feb 3, 2009

Updated

Unspecified vulnerability in WebAccess in Novell GroupWise 6.5, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 might allow remote attackers to obtain sensitive information via a crafted URL, related to conversion of POST requests to GET requests.

Affected Software

7 affected components

Novell GroupWise=6.5

Novell GroupWise=7.0

Novell GroupWise=7.01

Novell GroupWise=7.02x

Novell GroupWise=7.03

Novell GroupWise=7.03-hp1a

Novell GroupWise=8.0

Event History

Feb 3, 2009

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Data Sourced

via NVD·07:30 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability CVE-2009-0274 about?

CVE-2009-0274 is an unspecified vulnerability in Novell GroupWise that allows remote attackers to obtain sensitive information via a crafted URL.

What versions of Novell GroupWise are affected by CVE-2009-0274?

CVE-2009-0274 affects Novell GroupWise versions 6.5, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0.

How can CVE-2009-0274 be mitigated?

Mitigation for CVE-2009-0274 involves applying patches provided by Novell for the affected versions of GroupWise.

What can attackers do using the vulnerability CVE-2009-0274?

Attackers leveraging CVE-2009-0274 can obtain sensitive information by exploiting the vulnerability related to the conversion of POST requests to GET requests.

Which software products are impacted by CVE-2009-0274?

The vulnerability CVE-2009-0274 impacts the Novell GroupWise product line.