Reported January 11, 2001, by Microsoft
Microsoft Office 2000
Microsoft Windows Me
- Microsoft Windows 2000
The Web Extender Client (WEC) might send clients' NT LAN Manager (NTLM) credentials to a remote server if requested to do so, regardless of the Microsoft Internet Explorer (IE) security settings.
Discovered by David Litchfield, @stake, Inc.