CVE-2014-0600

CVSS 7.8 - HIGH
Description

FileUploadServlet in the Administration service in Novell GroupWise 2014 before SP1 allows remote attackers to read or write to arbitrary files via the poLibMaintenanceFileSave parameter, aka ZDI-CAN-2287.

Affected Products
1
Vendor Product Version
novell groupwise 2014
Weakness Types
CWE-200
CVE Information
CVE ID:
CVE-2014-0600
Published:
2014-08-29
Modified:
2026-05-06
CVSS Score:
7.8
Severity:
HIGH
Vector:
AV:N/AC:L/Au:N/C:C/I:N/A:N
Affected Vendors
novell
Quick Actions
CVSS Severity Scale
0.0 - 3.9 LOW
4.0 - 6.9 MEDIUM
7.0 - 8.9 HIGH
9.0 - 10.0 CRITICAL