{"uuid": "3e2564d0-085c-4b2c-96d1-81b45e4a99ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38756", "type": "seen", "source": "https://t.me/hacking_Attack/87466", "content": "Exploit Collector\nMicro Focus GroupWise Session ID Disclosure\n\nhttps://2.bp.blogspot.com/-KCLJyqafybo/WWlvfwHA-LI/AAAAAAAAIQI/MCuUzFpEyfsyWr-64Egm7HXW4FQP4atdgCLcBGAs/s1600/h88.png \nMicro Focus GroupWise is a messaging software for email and personal information management. Trovent Security GmbH discovered that the GroupWise web application transmits the session ID in HTTP GET requests in the URL when email content is accessed. The exposed session ID can be recorded in the browser history of the client and in log files of the web server or reverse proxy server. A possible attacker with access to the browser history or the server log files is able to take control of the user session with the help of the session ID. Versions prior to 18.4.2 are affected.\n\nSHA-256 | 45d877f2bc8d1d68f308fad7fe918c90f982d284964eee41b93805a3c6fb1ad2\n\nDownload\n# Trovent Security Advisory 2203-01 #\n#####################################\nMicro Focus GroupWise transmits session ID in URL\n#################################################\nOverview\n########\n\nAdvisory ID: TRSA-2203-01\nAdvisory version: 1.0\nAdvisory status: Public\nAdvisory URL: https://trovent.io/security-advisory-2203-01\nAffected product: Micro Focus GroupWise\nAffected version: prior to 18.4.2\nVendor: Micro Focus, https://www.microfocus.com\nCredits: Trovent Security GmbH, Stefan Pietsch\nDetailed description\n####################\n\nMicro Focus GroupWise is a messaging software for email and personal information\nmanagement.\nTrovent Security GmbH discovered that the GroupWise web application transmits\nthe session ID in HTTP GET requests in the URL when email content is accessed.\nThe exposed session ID can be recorded in the browser history of the client and\nin log files of the web server or reverse proxy server.\nA possible attacker with access to the browser history or the server log files\nis able to take control of the user session with the help of the session ID.\n\nSeverity: Medium\nCVSS Score: 4.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N)\nCVE ID: CVE-2022-38756\nCWE ID: CWE-598\nProof of concept\n################\n\nSimplified HTTP request:\n\n~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\nGET /attachment?session=<sessionid&id=... HTTP/1.1\nHost: <hostname\n...\nX-User-Agent: GroupWise Web (18.4.0-139604)\n~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\nSolution / Workaround\n#####################\n\nThe vendor released a fixed version of GroupWise.\n\nFixed in version 18.4.2.\nHistory\n#######\n\n2022-03-30: Vulnerability found\n2022-08-05: Vendor contacted\n2022-10-31: Contacted vendor again\n2022-11-01: Vendor replied that the vulnerability will be investigated\n2022-11-14: Vendor contacted, asking for status\n2022-11-16: Vendor replied that a security bulletin is being prepared\n2022-12-06: Vendor published security bulletin\n2023-01-27: Advisory published\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:01:26.183032Z"}