PT-2001-2364 · Novell · Groupwise Webaccess

Published 2001-08-14 · Updated 2017-12-19 · CVE-2001-1232

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions GroupWise WebAccess version 5.5

Description The issue allows a remote attacker to view arbitrary directory contents via an HTTP request with a lowercase "get". This is possible when directory indexing is enabled.

Recommendations For GroupWise WebAccess version 5.5, consider disabling directory indexing to prevent unauthorized access to directory contents.

Exploit

Fix

Related Identifiers

CVE-2001-1232

Affected Products

Groupwise Webaccess

References · 5

• 🔥 http://securityfocus.com/archive/1/204875 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-1232 · Security Note
• http://securityfocus.com/bid/3188 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6988 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1232 · Note