CVE-2008-1330 — Sensitive Information Exposure in Groupwise

CWE-200 — Sensitive Information ExposureCWE-2643 documents3 sources
Severity
3.5LOWNVD
EPSS
0.5%
top 34.28%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Novell Groupwise
Timeline
PublishedMar 18
Latest updateMay 1

Description

Unspecified vulnerability in the Windows client API in Novell GroupWise 7 before SP3 and 6.5 before SP6 Update 3 allows remote authenticated users to access the non-shared stored e-mail messages of another user who has shared at least one folder with the attacker.

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 6.8 | Impact: 2.9

Affected Packages1 packages

▶NVDnovell/groupwise9 versions+8

Patches

Patch: secure-support.novell.com ↗Patch: secure-support.novell.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-pf4c-v739-c665: Unspecified vulnerability in the Windows client API in Novell GroupWise 7 before SP3 and 6↗2022-05-01
▶
CVEList
CVE-2008-1330: Unspecified vulnerability in the Windows client API in Novell GroupWise 7 before SP3 and 6↗2008-03-18
▶
CVE-2008-1330 — Sensitive Information Exposure | cvebase