CVEvulnerability
CVE-2000-0982
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2000-12-19
- Last modified
- 2026-09-23
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could allow remote attackers to obtain the credentials by monitoring connections to the web server, aka the "Cached Web Credentials" vulnerability.
Affected configurations
• microsoft internet explorer 4.0
• microsoft internet explorer 4.0.1
• microsoft internet explorer 4.1
• microsoft internet explorer 5.0
• microsoft internet explorer 5.01
References
- http://www.acrossecurity.com/aspr/ASPR-2000-07-22-2-PUB.txt www.acrossecurity.com
- http://www.securityfocus.com/bid/1793 Exploit, Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-076 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5367 exchange.xforce.ibmcloud.com
- http://www.acrossecurity.com/aspr/ASPR-2000-07-22-2-PUB.txt www.acrossecurity.com
- http://www.securityfocus.com/bid/1793 Exploit, Patch, Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-076 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5367 exchange.xforce.ibmcloud.com