Description
Microsoft Internet Information Services (IIS) 7.5 uses weak permissions for the Operational log, which allows local users to discover credentials by reading this file, aka "Password Disclosure Vulnerability."
References
- 56439 vdb-entry
- oval:org.mitre.oval:def:15959 vdb-entry signature
- MS12-073 vendor-advisory