CVE-1999-1367

Severity CVSS v4.0:

Pending analysis

Type:

Unavailable / Other

Publication date:

06/05/1999

Last modified:

03/04/2025

Description

Internet Explorer 5.0 does not properly reset the username/password cache for Web sites that do not use standard cache controls, which could allow users on the same system to access restricted web sites that were visited by other users.

Impact

Vector 2.0

AV:L/AC:L/Au:N/C:P/I:P/A:P CVSS v2.0 Severity and Metrics:

Base Score: 4.60 MEDIUM
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Attack Vector (AV): Local
Attack Complexity (AC): Low
Authentication (Au): None
Confidentiality (C): Physical
Integrity (I): Physical
Availability (A): Physical

Base Score 2.0

4.60

Severity 2.0

MEDIUM

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:a:microsoft:internet_explorer:5.0:::::::*

To consult the complete list of CPE names with products and versions, see this page

References to Advisories, Solutions, and Tools

http://www.pcworld.com/news/article/0%2Caid%2C10842%2C00.asp
http://www.pcworld.com/news/article/0%2Caid%2C10842%2C00.asp