PT-1999-1687 · Microsoft · Internet Explorer

Published 1999-05-06 · Updated 2021-07-22 · CVE-1999-1367

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Internet Explorer version 5.0

Description: The issue arises from improper resetting of the username and password cache for web sites that do not utilize standard cache controls. This could potentially allow users on the same system to access restricted web sites that were previously visited by other users.

Recommendations: For Internet Explorer version 5.0, consider clearing the browser cache and saved credentials after each use to minimize the risk of unauthorized access. As a temporary workaround, restrict access to sensitive web sites until a more permanent solution is available.

Fix

Related Identifiers

CVE-1999-1367

Affected Products

Internet Explorer

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-1367 · Security Note
• http://pcworld.com/news/article/0%2Caid%2C10842%2C00.asp · Note