IT

Tracker / CVE-1999-0910

CVE-1999-0910

Medium 5.0

Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user.

Affected products and versions

microsoft commercial_internet_system
microsoft site_server
microsoft site_server_commerce

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References