CVE Catalog
CVE-1999-1277
MediumExploitation Probability (EPSS)
Low risk0.32%
23th percentile - higher than 23% of all known CVEs
Summary
The BackWeb client stores the username and password in cleartext in the Communication registry key, which could allow other local users to gain privileges by reading the password.
Risk Assessment
The risk is that local users may gain access to sensitive information, potentially leading to unauthorized access to the system.
Recommendation
It is recommended to secure stored authentication data by encrypting it and restricting access to the Communication registry key.
Original NVD description (English source)
BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow other local users to gain privileges by reading the password.