medium5.0
CVE-1999-0910
Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used…
Impact
Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Commercial Internet System | Versions 2.0, 2.5 |
| Microsoft | Site Server | Version 3.0 |
| Microsoft | Site Server Commerce | Version 3.0 |