CVE-1999-1235
MediumExploitation Probability (EPSS)
High risk84th percentile - higher than 84% of all known CVEs
Summary
Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow local users to read the information from another user's index.dat or people physically observing another user to read the information from the status bar when the user hovers the mouse over a link.
Risk Assessment
The risk involves the exposure of credentials, which could lead to unauthorized access to FTP servers. Organizations should be aware that local users may gain access to sensitive information.
Recommendation
It is recommended to avoid using Internet Explorer 5.0 for connecting to FTP servers and consider upgrading to a newer version of the browser that does not have this vulnerability.
Original NVD description (English source)
Internet Explorer 5.0 records the username and password for FTP servers in the URL history, which could allow (1) local users to read the information from another user's index.dat, or (2) people who are physically observing ("shoulder surfing") another user to read the information from the status bar when the user moves the mouse over a link.