Session fixation

2009-05-2615:30:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

Low

0.163 Low

EPSS

Percentile

96.0%

JSON

The WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 does not properly implement session management mechanisms, which allows remote attackers to gain access to user accounts via unspecified vectors.

CPENameOperatorVersion
groupwiseeq8.0 hp1
groupwiseeq7.0
groupwiseeq7.3 hp2
groupwiseeq7.0.2
groupwiseeq8.0
groupwiseeq7.0.0 sp1
groupwiseeq7.0.3
groupwiseeq7.3 hp1a
groupwiseeq7.0.0 sp2

Name	Operator	Version
groupwise	eq	8.0 hp1
groupwise	eq	7.0
groupwise	eq	7.3 hp2
groupwise	eq	7.0.2
groupwise	eq	8.0
groupwise	eq	7.0.0 sp1
groupwise	eq	7.0.3
groupwise	eq	7.3 hp1a
groupwise	eq	7.0.0 sp2

References

secunia.com/advisories/35177

www.novell.com/support/viewContent.do?externalId=7003266&sliceId=1

www.securityfocus.com/bid/35066

www.vupen.com/english/advisories/2009/1393

bugzilla.novell.com/show_bug.cgi?id=472979

exchange.xforce.ibmcloud.com/vulnerabilities/50688