CVE Catalog

CVE-1999-0578

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.55%

72th percentile - higher than 72% of all known CVEs

Summary

The Windows NT system's registry audit policy does not log event successes or failures for security-critical registry keys.

Risk Assessment

The lack of event logging may lead to undetected unauthorized changes to registry keys, posing a risk to system integrity.

Recommendation

It is recommended to configure the registry audit policy to log all events related to security keys.

Original NVD description (English source)

A Windows NT system's registry audit policy does not log an event success or failure for security-critical registry keys.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS