CVE-2009-0274

Unspecified vulnerability in WebAccess in Novell GroupWise 6.5, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 might allow remote attackers to obtain sensitive information via a crafted URL, related to conversion of POST requests to GET requests.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2009-02-03

Last modified

2024-09-16

Weaknesses

CWE-200

Affected products

• Groupwise (Novell)

References

• http://secunia.com/advisories/33744
• http://www.novell.com/support/viewContent.do?externalId=7002322
• http://www.securityfocus.com/bid/33559