Remote File Access Vulnerability in Novell GroupWise Administration Service

CVE-2014-0600

Summary

The Administration service in Novell GroupWise 2014 before SP1 is susceptible to a remote file access vulnerability. By exploiting the poLibMaintenanceFileSave parameter, attackers can gain unauthorized access to read or write arbitrary files on the server, potentially leading to data leakage or manipulation. This flaw poses significant risks to system integrity and confidentiality, necessitating prompt remediation.

References