CVE-1999-0916 Information disclosure in n/a
Attackers can read stored credentials from an unprotected file, leading to potential account takeover.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-1999-0916?
CVE-1999-0916 is a low-severity vulnerability in n/a, published on 22 Mar 2000. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
WebTrends software stores account names and passwords in a file which does not have restricted access permissions.
Which versions are affected by CVE-1999-0916?
It affects 5 products.
Products include Webtrends Webtrends Enterprise Suite, Webtrends Webtrends for Firewalls, Webtrends Webtrends Log Analyzer, Webtrends Webtrends Professional Suite, Webtrends Webtrends Security Analyzer.
How do I fix CVE-1999-0916?
No fix has been published for CVE-1999-0916 yet. Limit exposure of the affected software until one is available.
Is CVE-1999-0916 being exploited?
There is no known exploitation of CVE-1999-0916 in the wild and no public exploit code.
Sources
Also known as GHSA-6x5p-9rf7-4rx3.