| Package | Affected versions | Patched versions |
|---|---|---|
| commercial internet system | = 2.0= 2.5 | |
| site server | = 3.0 | |
| site server commerce | = 3.0 |
Microsoft Site Server and Commercial Internet System (MCIS) do not set an expiration for a cookie, which could then be cached by a proxy and inadvertently used by a different user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free