Description
GWWEB.EXE in GroupWise Web Access 5.5, and possibly other versions, allows remote attackers to determine the full pathname of the web server via an HTTP request with an invalid HTMLVER parameter.
Metrics
CVSS 2.0 5.0/10
AV:N/AC:L/Au:N/C:N/I:P/A:NAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
Timeline
- Published
- Jun 25, 2002
- Last modified
- Jun 16, 2026
- NVD status
- Modified