CVE-2009-0272

2009-02-0222:30:00

CWE-352

[email protected]

web.nvd.nist.gov

cve-2009-0272

csrf

vulnerability

novell groupwise

webaccess

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

54.1%

JSON

Cross-site request forgery (CSRF) vulnerability in Novell GroupWise WebAccess 6.5x, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 allows remote attackers to insert e-mail forwarding rules, and modify unspecified other configuration settings, as arbitrary users via unknown vectors.

Affected configurations

NVD

Node

novellgroupwiseMatch6.5

novellgroupwiseMatch7.0

novellgroupwiseMatch7.01

novellgroupwiseMatch7.02x

novellgroupwiseMatch7.03

novellgroupwiseMatch7.03hp1a

novellgroupwiseMatch8.0

CPENameOperatorVersion
novell:groupwisenovell groupwiseeq6.5
novell:groupwisenovell groupwiseeq7.0
novell:groupwisenovell groupwiseeq7.01
novell:groupwisenovell groupwiseeq7.02x
novell:groupwisenovell groupwiseeq7.03
novell:groupwisenovell groupwiseeq8.0

CPE	Name	Operator	Version
novell:groupwise	novell groupwise	eq	6.5
novell:groupwise	novell groupwise	eq	7.0
novell:groupwise	novell groupwise	eq	7.01
novell:groupwise	novell groupwise	eq	7.02x
novell:groupwise	novell groupwise	eq	7.03
novell:groupwise	novell groupwise	eq	8.0