Unspecified vulnerability in WebAccess in Novell GroupWise 6.5, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 might allow remote attackers to obtain sensitive information via a crafted URL, related to conversion of POST requests to GET requests.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://secunia.com/advisories/33744 | third party advisory vendor advisory |
http://www.novell.com/support/viewContent.do?externalId=7002322 | vendor advisory |
http://www.securityfocus.com/bid/33559 | vdb entry |