Microsoft Internet Information Services (IIS) 7.5 uses weak permissions for the Operational log, which allows local users to discover credentials by reading this file, aka "Password Disclosure Vulnerability."
References
Configurations
Configuration 1 (hide)
AND |
|
History
No history.
Information
Published : 2012-11-14 00:55
Updated : 2024-02-04 18:16
NVD link : CVE-2012-2531
Mitre link : CVE-2012-2531
CVE.ORG link : CVE-2012-2531
JSON object : View
Products Affected
microsoft
- windows_7
- windows_server_2008
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor