Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-38756 EUVD-2022-41319GHSA-664m-3r2m-mxpx

CVE-2022-38756 vulnerability in GW Web prior to 18.4.2

Published Dec 16, 2022 · Updated Apr 18, 2025 · Assigned by microfocus

Description

A vulnerability has been identified in Micro Focus GroupWise Web in versions prior to 18.4.2. The GW Web component makes a request to the Post Office Agent that contains sensitive information in the query parameters that could be logged by any intervening HTTP proxies.

Affected products

VendorProductAffectedFixed
Micro Focus Micro Focus GroupWise Web unspecified – < 18.4.2 18.4.2

References