Description
Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user.
References (2)
Core 2
Core References
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-035
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/625
Scores
EPSS
0.0578
EPSS Percentile
92.4%
Details
Status
published
Products (4)
microsoft/commercial_internet_system
2.0
microsoft/commercial_internet_system
2.5
microsoft/site_server
3.0
microsoft/site_server_commerce
3.0 alpha
Published
Sep 10, 1999
Tracked Since
Feb 18, 2026