{"api_version":"1","generated_at":"2026-07-23T14:48:44+00:00","cve":"CVE-2001-1231","urls":{"html":"https://cve.report/CVE-2001-1231","api":"https://cve.report/api/cve/CVE-2001-1231.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2001-1231","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2001-1231"},"summary":{"title":"CVE-2001-1231","description":"GroupWise 5.5 and 6 running in live remote or smart caching mode allows remote attackers to read arbitrary users' mailboxes by extracting usernames and passwords from sniffed network traffic, as addressed by the \"Padlock\" fix.","state":"PUBLISHED","assigner":"mitre","published_at":"2001-08-14 04:00:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securityfocus.com/archive/1/204672","name":"http://www.securityfocus.com/archive/1/204672","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"504"},{"url":"http://www.securityfocus.com/bid/3189","name":"http://www.securityfocus.com/bid/3189","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Novell GroupWise Padlock Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6998","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6998","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"503"},{"url":"http://support.novell.com/padlock/details.htm","name":"http://support.novell.com/padlock/details.htm","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"HTTP 404 Page Not Found","mime":"text/html","httpstatus":"404","archivestatus":"503"},{"url":"https://www.cve.org/CVERecord?id=CVE-2001-1231","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2001-1231","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2001","cve_id":"1231","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"novell","cpe5":"groupwise","cpe6":"5.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2001","cve_id":"1231","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"novell","cpe5":"groupwise","cpe6":"6.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-08T04:51:07.035Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"20010814 Fwd: Security Alert: Groupwise - Action Required","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/204672"},{"name":"3189","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/3189"},{"name":"novell-groupwise-admin-privileges(6998)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6998"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://support.novell.com/padlock/details.htm"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2001-08-14T00:00:00.000Z","descriptions":[{"lang":"en","value":"GroupWise 5.5 and 6 running in live remote or smart caching mode allows remote attackers to read arbitrary users' mailboxes by extracting usernames and passwords from sniffed network traffic, as addressed by the \"Padlock\" fix."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2002-05-09T09:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"20010814 Fwd: Security Alert: Groupwise - Action Required","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/204672"},{"name":"3189","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/3189"},{"name":"novell-groupwise-admin-privileges(6998)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6998"},{"tags":["x_refsource_CONFIRM"],"url":"http://support.novell.com/padlock/details.htm"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2001-1231","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"GroupWise 5.5 and 6 running in live remote or smart caching mode allows remote attackers to read arbitrary users' mailboxes by extracting usernames and passwords from sniffed network traffic, as addressed by the \"Padlock\" fix."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20010814 Fwd: Security Alert: Groupwise - Action Required","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/204672"},{"name":"3189","refsource":"BID","url":"http://www.securityfocus.com/bid/3189"},{"name":"novell-groupwise-admin-privileges(6998)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/6998"},{"name":"http://support.novell.com/padlock/details.htm","refsource":"CONFIRM","url":"http://support.novell.com/padlock/details.htm"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2001-1231","datePublished":"2002-06-25T04:00:00.000Z","dateReserved":"2002-05-01T00:00:00.000Z","dateUpdated":"2024-08-08T04:51:07.035Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2001-08-14 04:00:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:5.5:*:*:*:*:*:*:*","matchCriteriaId":"A61E70C4-FE03-42AA-9F9B-C8DEB3E12F34"},{"vulnerable":true,"criteria":"cpe:2.3:a:novell:groupwise:6.0:*:*:*:*:*:*:*","matchCriteriaId":"194704B6-4820-4398-8906-A1E529ED65AF"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2001","CveId":"1231","Ordinal":"1","Title":"CVE-2001-1231","CVE":"CVE-2001-1231","Year":"2001"},"notes":[{"CveYear":"2001","CveId":"1231","Ordinal":"1","NoteData":"GroupWise 5.5 and 6 running in live remote or smart caching mode allows remote attackers to read arbitrary users' mailboxes by extracting usernames and passwords from sniffed network traffic, as addressed by the \"Padlock\" fix.","Type":"Description","Title":"CVE-2001-1231"},{"CveYear":"2001","CveId":"1231","Ordinal":"2","NoteData":"2002-06-25","Type":"Other","Title":"Published"},{"CveYear":"2001","CveId":"1231","Ordinal":"3","NoteData":"2002-05-09","Type":"Other","Title":"Modified"}]}}}