CVE-1999-1375
CVSS 2.0 Score 5.0 of 10 (medium)
Details
Published Feb 11, 1999
Updated: Nov 20, 2024
Summary
CVE-1999-1375 is a vulnerability affecting Microsoft's Active Server Pages (ASP) and specifically the FileSystemObject (FSO) component in the showfile.asp file. Malicious actors can exploit this issue by inputting arbitrary file names into the file parameter, thus allowing them to read sensitive information from the server's file system remotely. This vulnerability poses a significant risk to web applications that use this outdated version of ASP and can lead to data breaches if left unpatched.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Microsoft IIS
Affected Vendors
- Microsoft