CVE-2012-2531 in IIS

Summary

Microsoft Internet Information Services (IIS) 7.5 uses weak permissions for the Operational log, which allows local users to discover credentials by reading this file, aka "Password Disclosure Vulnerability."

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 05/09/2012
• Disclosure: 11/13/2012
• Moderation: VulDB entry created
• Entries: VDB-6924 (1)
• CPE: ready
• CWE: CWE-200 (Confirmed)
• CVSS: 5.3
• EPSS: 0.00197
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-2531
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-2531
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-2531/