CVE-2000-0689: Account Manager LITE does not properly authenticate attempts to change the administrator password, which al...

Security readout for executives and security teams

This old CVE describes Account Manager LITE allowing a remote attacker to change the administrator password without proper authentication. If the CGI application is still internet-accessible, an attacker could take over that Account Manager instance. The public bundle does not name a CVSS score, supported versions, current patch, or active exploitation. Likely limited to legacy websites still running Account Manager LITE CGI scripts. Exposure is highest where the administrative CGI is reachable from untrusted networks. The supplied affected-product metadata is marked n/a, so defenders should not rely on CPE matching alone. Prioritize remediation if any public-facing legacy CGI site still uses Account Manager LITE. The business risk is administrative takeover of that application, but urgency depends on confirmed deployment because the CVE is old and product metadata is sparse. Mitigation focus: Identify and retire any Account Manager LITE deployments where possible.; Check vendor or archived guidance for any named fixed release.; Restrict administrative CGI access to trusted networks only..

Prepared

Jul 12, 2026, 02:56 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.