← Database

CVE-2009-0272

MEDIUM CVSS: 6.8 Published: 2009-02-02 Modified: 2026-06-16

Description

Cross-site request forgery (CSRF) vulnerability in Novell GroupWise WebAccess 6.5x, 7.0, 7.01, 7.02x, 7.03, 7.03HP1a, and 8.0 allows remote attackers to insert e-mail forwarding rules, and modify unspecified other configuration settings, as arbitrary users via unknown vectors.

Affected Platforms

Novell Groupwise

Weakness Type

CWE-352

References