CVE-1999-0993

High

Published: 13/12/1999(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

6.94%

93th percentile - higher than 93% of all known CVEs

Modifications to Access Control Lists (ACLs) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed.

This may lead to unauthorized access to resources as changes in permissions are not enforced immediately.

It is recommended to regularly refresh the directory store cache after making changes to ACLs.

Original NVD description (English source)

Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed.