Security Advisory
CVE-2012-2531
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Microsoft Internet Information Services (IIS) 7.5 uses weak permissions for the Operational log, which allows local users to discover credentials by reading this file, aka "Password Disclosure Vulnerability."