CVE-2012-2531

Microsoft Internet Information Services (IIS) 7.5 uses weak permissions for the Operational log, which allows local users to discover credentials by reading this file, aka "Password Disclosure Vulnerability."
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:sp1:x86:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*

History

No history.

Information

Published : 2012-11-14 00:55

Updated : 2024-02-04 18:16


NVD link : CVE-2012-2531

Mitre link : CVE-2012-2531

CVE.ORG link : CVE-2012-2531


JSON object : View

Products Affected

microsoft

  • windows_7
  • windows_server_2008
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor