CVE-2025-0885 - Incorrect Authorization vulnerability affects OpenText™ GroupWise

Back Back to CVE browser

LOW

Incorrect Authorization vulnerability affects OpenText™ GroupWise

Published Jul 3, 2025

1.8

LOW

CVSS 4.0

EPSS 0.14%

Description

Incorrect Authorization vulnerability in OpenText™ GroupWise allows Exploiting Incorrectly Configured Access Control Security Levels.

The vulnerability could allow unauthorized access to calendar items marked private.

This issue affects GroupWise versions 7 through 17.5, 23.4, 24.1, 24.2, 24.3, 24.4.

Affected products

Vendor OpenText™ Product GroupWise Default
unaffected
- Version
  23.4
  Status
  affected
  Constraints
  -
- Version
  24.1
  Status
  affected
  Constraints
  -
- Version
  24.2
  Status
  affected
  Constraints
  -
- Version
  24.3
  Status
  affected
  Constraints
  -
- Version
  24.4
  Status
  affected
  Constraints
  -
- Version
  7
  Status
  affected
  Constraints
  <=17.5

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

OpenText™

GroupWise

unaffected

Version	Status	Constraints
23.4	affected	-
24.1	affected	-
24.2	affected	-
24.3	affected	-
24.4	affected	-
7	affected	<=17.5

Remediation

Vendor solution

Security Alert - Incorrect Authorization vulnerability has been discovered in OpenText™ GroupWise. https://portal.microfocus.com/s/article/KM000041560

Weaknesses (1)

CWE-863

Incorrect Authorization