Description
Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user.
Affected products
- Microsoft / commercial_internet_system2.0 – 2.0
- Microsoft / commercial_internet_system2.5 – 2.5
- Microsoft / site_server3.0 – 3.0
- Microsoft / site_server_commerce3.0 – 3.0