CVE-1999-0895
HighExploitation Probability (EPSS)
Elevated risk67th percentile - higher than 67% of all known CVEs
Summary
Firewall-1 does not properly restrict access to LDAP attributes, which may lead to unauthorized access to sensitive information.
Risk Assessment
The organization may be exposed to data leaks and attacks that exploit the improper management of access to LDAP attributes.
Recommendation
It is recommended to review and update the Firewall-1 configuration to properly restrict access to LDAP attributes.
Other vulnerabilities in Firewall-1
See all- CVE-2000-0116High
Firewall-1 does not properly filter script tags, allowing remote attackers to bypass the 'Strip Script Tags' restriction by including an extra < in front of the SCRIPT tag.
- CVE-1999-0770Low
Firewall-1 sets a long timeout for connections that begin with ACK or other packets except SYN, allowing an attacker to conduct a denial of service via a large number of connection attempts to unresponsive systems.
Original NVD description (English source)
Firewall-1 does not properly restrict access to LDAP attributes.