Skip to content
COOEY

FAIL › dossier

cgi

VENDOR

Failure events
1
Zero-days
0
RCEs
0
On KEV
0
Critical
1
Worst shame
0
Dossier not yet built — the RAG curator builds one for players with ≥2 failure events. The failure history and sentiment below are live.
FAILURE HISTORY · 1
DATEEVENTSEVSUMMARY
2000-12-19 CVE-2000-0944 critical CVE-2000-0944: CGI Script Center News Update 1.1 does not properly validate the original news a
SENTIMENT · TRUSTED SOURCES
synthesissevere-fallout-0.60
CGI's failure to validate passwords during updates led to remote attackers bypassing authentication, a severe flaw in core security logic that was widely recognized as a critical vulnerability at the
cooey ↗severe-fallout-0.80
NVD describes the flaw as allowing remote attackers to modify passwords without knowing the original, indicating a severe authentication bypass.
"CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password change operation, which allows remote attackers to modify the password without knowing the original password."
www.cvefind.com ↗severe-fallout+0.00
Source provides general CVE database context without specific commentary on CGI's handling or the severity of this specific flaw.
dailysecurityreview.com ↗severe-fallout+0.00
Source discusses unrelated Ahold Delhaize USA cyberattack; no mention of CGI or CVE-2000-0944.
dailysecurityreview.com ↗severe-fallout+0.00
Source discusses unrelated Oracle Cloud breach; no mention of CGI or CVE-2000-0944.
securityonline.info ↗severe-fallout+0.00
Source discusses unrelated F5 BIG-IP APM vulnerability; no mention of CGI or CVE-2000-0944.
cvefeed.io ↗severe-fallout+0.00
Source provides general CISA KEV catalog context without specific commentary on CGI or CVE-2000-0944.
CISA ↗severe-fallout+0.00
Source provides general CISA news context without specific commentary on CGI or CVE-2000-0944.