CVE-2008-2143

low Microsoft
CVSS v3 Base Score
1.9
AV:L/AC:M/Au:N/C:P/I:N/A:N
EPSS Score
0.5%
Exploitation probability in 30 days
Top 36% most likely to be exploited
Attack Characteristics
Attack Vector
Local
Attack Complexity
M
Confidentiality
P
Integrity
None
Availability
None
Published: May 12, 2008 (6576 days ago)
Last Modified: April 23, 2026
Vendor: Microsoft
Source: NVD

Description

Unspecified versions of Microsoft Outlook Web Access (OWA) use the Cache-Control: no-cache HTTP directive instead of no-store, which might cause web browsers that follow RFC-2616 to cache sensitive information.

CWE

NVD-CWE-Other

Affected Products

microsoft outlook web access

References

🔗 www.kb.cert.org 🔗 www.securityfocus.com 🔗 exchange.xforce.ibmcloud.com 🔗 www.kb.cert.org 🔗 www.securityfocus.com