CVE Catalog
CVE-1999-0910
MediumExploitation Probability (EPSS)
Very high risk5.78%
92th percentile - higher than 92% of all known CVEs
Summary
Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could lead to it being cached by a proxy and inadvertently used by a different user.
Risk Assessment
The lack of an expiration date for the cookie poses a risk that sensitive data may be inadvertently shared with other users, potentially leading to privacy and security breaches.
Recommendation
It is recommended to configure the server to set expiration dates for cookies, which will minimize the risk of unauthorized use.
Original NVD description (English source)
Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user.