VULNERABILITY INTELLIGENCE

CVE-2000-0402

CVSS score2.1 LOW
EPSS probability90.61%
CISA KEVNot currently listed
Published2000-05-30
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N

Description

The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability.

Primary references