don't know from which GroupWise version <html><head> information can be found in the mail header. The following information is output for mails in the header when sent by the Windows client: or gwweb.
Affected versions that are in use are 24.3 and 24.4. As far as I remember, versions 18.5x and 23.4 are not affected. But please check anyway
<html><head>=0A=0A<meta name=3D"Generator" content=3D"OpenText Groupwise =
Client (Version 24.3.0 Build: 146027)">=0A<meta http-equiv=3D"Content-Type=
" content=3D"text/html; charset=3Dutf-8"></head>=0A<body style=3D"font: =
12pt/normal Arial; font-size-adjust: none; font-stretch: normal;"><div =
class=3D"GroupWiseMessageBody" id=3D"GroupWiseSection_1724259501000_name=
@domain.com_B4424A9019880000B32C390051002A00_"><div>Test 18:58<br></div></div=
></body></html>
The following info when sending via gwweb.
<html><head>
<meta name=3D"Generator" content=3D"OpenText GroupWise Web">
</head><body><div id=3D"GroupWiseSection_1724260575942_name@domain.com_B44=
24A9019880000B32C390051002A00_" class=3D"GroupWiseMessageBody">=0A<div>Test=
19:16</div>=0A</div></body></html>
I am an IT forensic expert and I consider it a risk to disclose information about which mail client was used to compose a mail and, above all, it is highly questionable to include the exact build and version. I normally remove such information from the header. Here it would be MIME CONTENT/ TYPE that has to be removed, but as far as I can analyze it, there is no RFC-compliant form here in the case of OT. As always, I am only seeing with my eyes, maybe I am talking nonsense here. For security reasons, the whole thing should be removed from the header from the outset.
George
“You can't teach a person anything, you can only help them to discover it within themselves.” Galileo Galilei
Support
Documentation
Learning Services
Partner Programs
