Lucene search
HistorySep 29, 1999 - 4:00 a.m.
CVE-1999-0372
information security
backoffice server
account names
passwords
cve-1999-0372
nvd
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
52.6%
The installer for BackOffice Server includes account names and passwords in a setup file (reboot.ini) which is not deleted.
Affected configurations
Node
microsoftwindows_2000
ORmicrosoftwindows_nt
Node
microsoftbackofficeMatch4.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:windows_2000 | microsoft windows 2000 | eq | * |
| microsoft:windows_nt | microsoft windows nt | eq | * |
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
52.6%
Related for CVE-1999-0372