CVEvulnerability

CVE-2009-1634

7.5 HIGH Published 2009-05-26 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2009-05-26
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 does not properly implement session management mechanisms, which allows remote attackers to gain access to user accounts via unspecified vectors.

Affected configurations

• novell groupwise 7.0 • novell groupwise 7.0.0 • novell groupwise 7.0.2 • novell groupwise 7.0.3 • novell groupwise 7.03 • novell groupwise 8.0

References

http://secunia.com/advisories/35177 Vendor Advisory
http://www.novell.com/support/viewContent.do?externalId=7003266&sliceId=1 Vendor Advisory
http://www.securityfocus.com/bid/35066 www.securityfocus.com
http://www.vupen.com/english/advisories/2009/1393 Vendor Advisory
https://bugzilla.novell.com/show_bug.cgi?id=472979 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/50688 exchange.xforce.ibmcloud.com
http://secunia.com/advisories/35177 Vendor Advisory
http://www.novell.com/support/viewContent.do?externalId=7003266&sliceId=1 Vendor Advisory
http://www.securityfocus.com/bid/35066 www.securityfocus.com
http://www.vupen.com/english/advisories/2009/1393 Vendor Advisory
https://bugzilla.novell.com/show_bug.cgi?id=472979 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/50688 exchange.xforce.ibmcloud.com