CVE-2009-1762

Vulnerability

Multiple cross-site scripting (XSS) vulnerabilities exist in the Novell GroupWise WebAccess login page (gw/webacc) in GroupWise 7.x before 7.03 HP2 and GroupWise 8.0 before 8.0.0 HP1 [2]. The flaws are located in the handling of the GWAP.version and User.Theme (also known as User.Theme.index) parameters.

Exploitation

An attacker can exploit these vulnerabilities by sending a crafted request to the login page with malicious JavaScript or HTML embedded in either the GWAP.version or User.Theme parameter. No authentication is required; the attacker only needs network access to the GroupWise WebAccess server. The injected script executes in the context of the victim's browser when the page loads.

Impact

Successful exploitation allows the attacker to inject arbitrary web script or HTML, potentially defacing the login page, stealing credentials, or performing other malicious actions within the security context of the affected site. This could prevent legitimate users from logging in or lead to further compromise.

Mitigation

Novell released patches to address these issues. For GroupWise 7.x, apply Hot Patch 3 (HP3) or later. For GroupWise 8.0, apply Hot Patch 2 (HP2) or later [2]. No workarounds are documented. This CVE is not listed in the Known Exploited Vulnerabilities (KEV) catalog.