CVE Daily

CVE-2012-2531

Microsoft Internet Information Services (IIS) 7.5 uses weak permissions for the ...

Low CVSS 2.1

Overview

Microsoft Internet Information Services (IIS) 7.5 uses weak permissions for the Operational log, which allows local users to discover credentials by reading this file, aka "Password Disclosure Vulnerability."

CWE: CWE-200 Published: 2012-11-14T00:55:01.547
Risk analysis

This vulnerability is rated 🟢 LOW.

  • CVSS: 2.1 (LOW)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags