Description
Unspecified vulnerability in the Windows client API in Novell GroupWise 7 before SP3 and 6.5 before SP6 Update 3 allows remote authenticated users to access the non-shared stored e-mail messages of another user who has shared at least one folder with the attacker.
References
- ADV-2008-0904 vdb-entry
- groupwise-clientapi-security-bypass(41223) vdb-entry
- 1019616 vdb-entry
- 29409 third-party-advisory
- https://secure-support.novell.com/KanisaPlatform/Publishing/732/3263374_f.SAL_Public.html
- 28265 vdb-entry