CVE-2000-0982
published 2000-12-19CVE-2000-0982: Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could allow remote attackers…
PriorityP424high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
12.61%
96.2th percentile
Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could allow remote attackers to obtain the credentials by monitoring connections to the web server, aka the "Cached Web Credentials" vulnerability.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | internet_explorer | — | — |
| microsoft | internet_explorer | — | — |
| microsoft | internet_explorer | — | — |
| microsoft | internet_explorer | — | — |
| microsoft | internet_explorer | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Microsoft Internet Explorer up to 5.01 Credential privileges management (MS00-076 / XFDB-5367)
vuldb·2026-09-24·CVSS 7.5
CVE-2000-0982 [HIGH] Microsoft Internet Explorer up to 5.01 Credential privileges management (MS00-076 / XFDB-5367)
A vulnerability categorized as critical has been discovered in Microsoft Internet Explorer up to 5.01. Affected by this vulnerability is an unknown functionality of the component Credential Handler. Executing a manipulation can lead to improper privilege management.
This vulnerability is tracked as CVE-2000-0982. The attack can be launched remotely. No exploit exists.
It is advisable to upgrade the affected component.
GHSA
GHSA-cjx3-6mg3-8jgm: Internet Explorer before 5
ghsa_unreviewed·2022-04-30
CVE-2000-0982 [HIGH] GHSA-cjx3-6mg3-8jgm: Internet Explorer before 5
Internet Explorer before 5.5 forwards cached user credentials for a secure web site to insecure pages on the same web site, which could allow remote attackers to obtain the credentials by monitoring connections to the web server, aka the "Cached Web Credentials" vulnerability.
No detection rules found.
No writeups or analysis indexed.
http://www.acrossecurity.com/aspr/ASPR-2000-07-22-2-PUB.txthttp://www.securityfocus.com/bid/1793https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-076https://exchange.xforce.ibmcloud.com/vulnerabilities/5367http://www.acrossecurity.com/aspr/ASPR-2000-07-22-2-PUB.txthttp://www.securityfocus.com/bid/1793https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-076https://exchange.xforce.ibmcloud.com/vulnerabilities/5367
2000-12-19
Published