VulnerabilityModified
CVE-2002-0697
Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP client to directly connect to MMS and bypass the checks for MMS credentials.
HIGH 10.0EPSS 18.0%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 18.0%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP client to directly connect to MMS and bypass the checks for MMS credentials.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 17.99% probability · 97th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/metadirectory services
- Source
- cve@mitre.org
References
- http://www.iss.net/security_center/static/9657.php
- http://www.securityfocus.com/bid/5308
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-036
- http://www.iss.net/security_center/static/9657.php
- http://www.securityfocus.com/bid/5308
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-036
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.