CVE-1999-0592

The Logon box of a Windows NT system displays the name of the last user who logged in

published February 4, 2000

CVSS
โ€”
EPSS
2%
Percentile
79.4
In the wild
Unconfirmed
What it is

๐Ÿ’ก That Windows NT login box shows you who last logged in โ€” a surprisingly sneaky way to reveal user information! Think of it like an open guest book at a hotel; potential intruders can easily see who checked in last, which could help them guess who to target next. If someone knows the last occupant, they may try to impersonate them! While not explosively critical, this vulnerability could give an unwanted edge to an attacker. By simply seeing the last username, they might tailor their approach for accessing sensitive accounts, leading to unauthorized access or information leaks.

Put simply

Think of it like an open guest book at a hotel; potential intruders can easily see who checked in last, which could help them guess who to target next. If someone knows the last occupant, they may try to impersonate them! The Logon box of Windows NT inadvertently displays the username of the last logged-in user, creating an opportunity for social engineering attacks or unauthorized access attempts by providing valuable information to attackers.

What to do

While not explosively critical, this vulnerability could give an unwanted edge to an attacker. By simply seeing the last username, they might tailor their approach for accessing sensitive accounts, leading to unauthorized access or information leaks. To mitigate this risk, ensure user awareness about the implications of this feature. Additionally, consider disabling the display of the last logged-in user in the system settings or configuring the system to lock down unauthorized logins. Regularly assess and apply security updates to the operating system. You've got this! Stay vigilant and keep your system secure! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01891 ยท 79.4th percentile
Published
2000-02-04T05:00Z
EPSS history
Timeline
  • 04 FEB 05:00Z
    The Logon box of a Windows NT system displays the name of the last user who logged in
    cvelistv5