EXPOSURES › CVE-2000-0944
CVE-2000-0944
CRITICAL
DETAIL
SourceNVD · cve
Published2000-12-19
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2000-0944 ↗
▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.
PLAYERS IMPLICATED
DESCRIPTION
CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password.
SENTIMENT · TRUSTED SOURCES
synthesis
severe-fallout
-0.60
CGI's failure to validate passwords during updates led to remote attackers bypassing authentication, a severe flaw in core security logic that was widely recognized as a critical vulnerability at the
NVD describes the flaw as allowing remote attackers to modify passwords without knowing the original, indicating a severe authentication bypass.
"CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password."
Source provides general CVE database context without specific commentary on CGI's handling or the severity of this specific flaw.
Source discusses unrelated Ahold Delhaize USA cyberattack; no mention of CGI or CVE-2000-0944.
Source discusses unrelated Oracle Cloud breach; no mention of CGI or CVE-2000-0944.
Source discusses unrelated F5 BIG-IP APM vulnerability; no mention of CGI or CVE-2000-0944.
Source provides general CISA KEV catalog context without specific commentary on CGI or CVE-2000-0944.
Source provides general CISA news context without specific commentary on CGI or CVE-2000-0944.
AFFECTED FEDRAMP PRODUCTS · 3
| PRODUCT | STATUS |
|---|---|
| CGI Federal IaaS Cloud CGI Federal |
Authorized |
| Momentum® Enterprise Suite - JAB CGI Federal |
Authorized |
| Sunflower Asset Management Cloud (SAMC) CGI Federal |
In Process |