CVE Catalog
CVE-2000-0109
HighExploitation Probability (EPSS)
Very high risk8.42%
94th percentile - higher than 94% of all known CVEs
Summary
The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable default passwords.
Risk Assessment
The lack of password security may lead to unauthorized access to the system, posing a serious threat to the organization's data.
Recommendation
It is recommended to immediately change default passwords and implement strong password policies for all user accounts.
Original NVD description (English source)
The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable default passwords.