CVE Catalog

CVE-2000-0220

Medium
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
1.44%

70th percentile - higher than 70% of all known CVEs

Summary

ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event.

Risk Assessment

Sending data in cleartext may lead to the exposure of confidential information, posing a security risk to the organization.

Recommendation

It is recommended to update ZoneAlarm software and implement encryption for transmitted data to protect sensitive information.

Original NVD description (English source)

ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS