← Database

CVE-2022-38756

MEDIUM CVSS: 4.3 Published: 2022-12-16 Modified: 2026-06-17

Description

A vulnerability has been identified in Micro Focus GroupWise Web in versions prior to 18.4.2. The GW Web component makes a request to the Post Office Agent that contains sensitive information in the query parameters that could be logged by any intervening HTTP proxies.

Affected Platforms

Microfocus Groupwise

Weakness Type

CWE-532, CWE-532

References