CVE-1999-1473: Medium severity Microsoft Internet Explorer vulnerability
When a Web site redirects the browser to another site, Internet Explorer 3.02 and 4.0 automatically resends authentication information to the second site, aka the "Page Redirect Issue."
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Internet Explorer 3.02from your environment.Uninstall or discontinue use of Internet Explorer 3.02, which automatically resends authentication information when a site redirects the browser.
- Remove
Remove
Internet Explorer 4.0from your environment.Uninstall or discontinue use of Internet Explorer 4.0, which automatically resends authentication information when a site redirects the browser.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1473?
CVE-1999-1473 is classified as a medium severity vulnerability due to the potential for unauthorized access to sensitive information.
How does CVE-1999-1473 affect Internet Explorer users?
CVE-1999-1473 affects Internet Explorer users by automatically resending authentication credentials to redirected sites, possibly exposing them to credential theft.
What versions of Internet Explorer are impacted by CVE-1999-1473?
CVE-1999-1473 impacts Internet Explorer versions 3.0.2 and 4.0.
What is a potential exploit scenario for CVE-1999-1473?
An attacker can exploit CVE-1999-1473 by tricking users into visiting a malicious site that redirects them, leading to the unintentional disclosure of credentials.
How can users mitigate the risks associated with CVE-1999-1473?
To mitigate the risks of CVE-1999-1473, users should avoid using vulnerable versions of Internet Explorer and consider upgrading to a more secure browser.