CVE-1999-0348

Summary

CVE-1999-0348 is a vulnerability affecting Microsoft Internet Information Services (IIS) and its Active Server Pages (ASP) feature. When two virtual servers are configured to use the same physical directory, a caching issue in ASP causes sensitive information to be inadvertently released. An attacker can potentially access this data by making requests to the incorrect virtual server. This vulnerability poses a significant risk to data confidentiality and could lead to unauthorized access. It is recommended that affected organizations separate the physical directories of their virtual servers to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.