Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2018-12468

Arbitrary File Upload in GroupWise Administration Console

Description

A vulnerability in the administration console of Micro Focus GroupWise prior to version 18.0.2 may allow a remote attacker authenticated as an administrator to upload files to an arbitrary path on the server. In certain circumstances this could result in remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Micro Focus GroupWise

  • 2018 to < 18.0.2affected

References