CVE-2009-1634: Novell Groupwise

High severity, CVSS 7.5. EPSS: 7.2% chance of exploitation in the next 30 days.

The WebAccess component in Novell GroupWise 7.x before 7.03 HP3 and 8.x before 8.0 HP2 does not properly implement session management mechanisms, which allows remote attackers to gain access to user accounts via unspecified vectors.

Affected products

• Novell Groupwise: version 7.0 only; version 7.0.0 only; version 7.0.2 only; version 7.0.3 only; version 7.03 only; version 8.0 only

Published 2009-05-26. Last modified 2026-06-16.