CVE-1999-1277
BackWeb client stores the username and password in cleartext for proxy authentication in the...
BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow other local users to gain privileges by reading the password.
Exploit likelihood
What each source reports
NVD Score used
BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow other local users to gain privileges by reading the password.
- Record
CVE-1999-1277- CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow other local users to gain privileges by reading the password.
- Record
CVE-1999-1277- Updated
- 2026-11-02
EUVDEUVD-1999-1258 No score
BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow other local users to gain privileges by reading the password.
- Record
EUVD-1999-1258- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-76mc-rpwg-m8ch No score
BackWeb client stores the username and password in cleartext for proxy authentication in the...
BackWeb client stores the username and password in cleartext for proxy authentication in the Communication registry key, which could allow other local users to gain privileges by reading the password.
- Record
GHSA-76mc-rpwg-m8ch- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-1999-1277 is a medium vulnerability (CVSS 4.6) in Backweb Technologies Client, published December 24, 1998. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.32%, the 24th percentile. No source names a fixed version.