Information Exposure Vulnerability in Microsoft Windows Products
CVE-1999-0007

Currently unrated

Key Information:

Vendor
Microsoft
Status
Site Server
Directory Server
Ssleay
Certificate Server
Vendor
CVE Published:
26 June 1998

Summary

An information exposure vulnerability exists in certain Microsoft Windows products, allowing attackers to retrieve sensitive information from SSL-encrypted sessions using the PKCS #1 standard. This security flaw could potentially compromise confidentiality and expose private data transmitted over secure connections.

References

https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.