Directory Traversal Vulnerability in Novell GroupWise by Novell

CVE-2012-0419

Summary

A directory traversal vulnerability exists in the HTTP interfaces of Novell GroupWise, enabling remote attackers to exploit this weakness. By crafting specific requests that include directory traversal sequences, an attacker could gain unauthorized access to arbitrary files on the server. This flaw impacts GroupWise versions 8.0 prior to Support Pack 3 and 2012 prior to Support Pack 1, posing a significant risk to data confidentiality.

References