Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could allow remote attackers to obtain the credentials by monitoring connections to the web server, aka the Cached Web Credentials vulnerability.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Internet_explorer | Microsoft | 4.0 (including) | 4.0 (including) |
| Internet_explorer | Microsoft | 4.0.1 (including) | 4.0.1 (including) |
| Internet_explorer | Microsoft | 4.1 (including) | 4.1 (including) |
| Internet_explorer | Microsoft | 5.0 (including) | 5.0 (including) |
| Internet_explorer | Microsoft | 5.01 (including) | 5.01 (including) |
References
- http://www.acrossecurity.com/aspr/ASPR-2000-07-22-2-PUB.txt
- http://www.securityfocus.com/bid/1793
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-076
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5367
- http://www.acrossecurity.com/aspr/ASPR-2000-07-22-2-PUB.txt
- http://www.securityfocus.com/bid/1793
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-076
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5367