GroupWise WebAccess 5.5 with directory indexing enabled allows a remote attacker to view arbitrary directory contents via an HTTP request with a lowercase "get".Referenceshttps://exchange.xforce.ibmcloud.com/vulnerabilities/6988http://www.securityfocus.com/archive/1/204875http://www.securityfocus.com/bid/3188