CVE-2000-0199

high Microsoft
CVSS v3 Base Score
7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS Score
0.2%
Exploitation probability in 30 days
Top 60% most likely to be exploited
Attack Characteristics
Attack Vector
Local
Attack Complexity
Low
Confidentiality
C
Integrity
C
Availability
C
Published: March 14, 2000 (9557 days ago)
Last Modified: April 16, 2026
Vendor: Microsoft
Source: NVD

Description

When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login name and password" option is not set, then the Enterprise Manager uses weak encryption to store the login ID and password.

CWE

NVD-CWE-Other

Affected Products

microsoft sql server

References

🔗 www.securityfocus.com 🔗 www.securityfocus.com