CVE-1999-0575
HighExploitation Probability (EPSS)
Very high risk92th percentile - higher than 92% of all known CVEs
Summary
The user audit policy in Windows NT does not log event successes or failures, such as Logon and Logoff, File and Object Access, User and Group Management, Security Policy Changes, and System and Process Tracking.
Risk Assessment
The lack of event logging can lead to difficulties in identifying unauthorized actions and security breaches, increasing the risk for the organization.
Recommendation
It is recommended to configure the audit policy in Windows NT to log all relevant events, which will enhance monitoring and security analysis.
Original NVD description (English source)
A Windows NT system's user audit policy does not log an event success or failure, e.g. for Logon and Logoff, File and Object Access, Use of User Rights, User and Group Management, Security Policy Changes, Restart, Shutdown, and System, and Process Tracking.