VULNERABILITY INTELLIGENCE

CVE-1999-1104

CVSS score4.6 MEDIUM
CISA KEVNot currently listed
Published1999-12-31
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords.

Primary references