Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 1999-09-09 21:00
Updated : 2018-10-12 14:29
NVD link : CVE-1999-0910
Mitre link : CVE-1999-0910
JSON object : View
CWE
Products Affected
microsoft
- site_server
- site_server_commerce
- commercial_internet_system