CVE-2009-0272

Cross-site request forgery (CSRF) vulnerability in Novell GroupWise WebAccess 6.5x, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 allows remote attackers to insert e-mail forwarding rules, and modify unspecified other configuration settings, as arbitrary users via unknown vectors.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:novell:groupwise:6.5:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.0:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.01:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.02x:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.03:*:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:7.03:hp1a:*:*:*:*:*:*
cpe:2.3:a:novell:groupwise:8.0:*:*:*:*:*:*:*

History

21 Nov 2024, 00:59

Type Values Removed Values Added
References () http://secunia.com/advisories/33744 - () http://secunia.com/advisories/33744 -
References () http://www.novell.com/support/search.do?usemicrosite=true&searchString=7002319 - Vendor Advisory () http://www.novell.com/support/search.do?usemicrosite=true&searchString=7002319 - Vendor Advisory
References () http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-21 - () http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-21 -
References () http://www.securityfocus.com/archive/1/500569/100/0/threaded - () http://www.securityfocus.com/archive/1/500569/100/0/threaded -

Information

Published : 2009-02-02 22:30

Updated : 2024-11-21 00:59


NVD link : CVE-2009-0272

Mitre link : CVE-2009-0272

CVE.ORG link : CVE-2009-0272


JSON object : View

Products Affected

novell

  • groupwise
CWE
CWE-352

Cross-Site Request Forgery (CSRF)