Security Advisory
CVE-2014-0600
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
FileUploadServlet in the Administration service in Novell GroupWise 2014 before SP1 allows remote attackers to read or write to arbitrary files via the poLibMaintenanceFileSave parameter, aka ZDI-CAN-2287.