CVE-2001-0502

2002-03-0905:00:00

mitre

www.cve.org

AI Score

6.4

Confidence

High

EPSS

Percentile

12.7%

JSON

Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the directory principal is a domain user and the data attribute is the domain password, which allows local users to modify the login password of other users.