CVE-2009-1634

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-05-26 · updated 2026-06-16

Description

The WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 does not properly implement session management mechanisms, which allows remote attackers to gain access to user accounts via unspecified vectors.

Affected products

Novell GroupWise: 7.0, 7.0.0-sp1, 7.0.0-sp2, 7.0.2, 7.0.3, 7.03-hp1a (+3)

References

http://secunia.com/advisories/35177
http://www.novell.com/support/viewContent.do?externalId=7003266&sliceId=1
http://www.securityfocus.com/bid/35066
http://www.vupen.com/english/advisories/2009/1393
https://bugzilla.novell.com/show_bug.cgi?id=472979
https://exchange.xforce.ibmcloud.com/vulnerabilities/50688
http://secunia.com/advisories/35177
http://www.novell.com/support/viewContent.do?externalId=7003266&sliceId=1
http://www.securityfocus.com/bid/35066
http://www.vupen.com/english/advisories/2009/1393
https://bugzilla.novell.com/show_bug.cgi?id=472979
https://exchange.xforce.ibmcloud.com/vulnerabilities/50688

Get alerted when CVE-2009-1634 or the next vulnerability affects your stack