VULNERABILITY INTELLIGENCE

CVE-2012-2531

CVSS score2.1 LOW
EPSS probability0.94%
CISA KEVNot currently listed
Published2012-11-14
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N

Description

Microsoft Internet Information Services (IIS) 7.5 uses weak permissions for the Operational log, which allows local users to discover credentials by reading this file, aka "Password Disclosure Vulnerability."

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references