CVE Catalog
CVE-1999-0576
HighExploitation Probability (EPSS)
Very high risk4.82%
91th percentile - higher than 91% of all known CVEs
Summary
The file audit policy of a Windows NT system does not log event success or failure for security-critical files or directories.
Risk Assessment
The lack of audit event logging may lead to undetected unauthorized changes to critical files, increasing the risk of security breaches.
Recommendation
It is recommended to configure the audit policy to log events for all critical files and directories to ensure proper control and monitoring.
Original NVD description (English source)
A Windows NT system's file audit policy does not log an event success or failure for security-critical files or directories.