Description

When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise Manager uses weak encryption to store the login ID and password.

Remediation

References

CVE-2000-0199

Related Vulnerabilities

Atlassian Jira Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-4318)

Beego Framework Incorrect Default Permissions Vulnerability (CVE-2019-16355)

WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.29)

TYPO3 Improper Input Validation Vulnerability (CVE-2009-0258)

CubeCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-20716)

Severity

High

Classification

CVE-2000-0199

Tags

Missing Update Known Vulnerabilities