Vulnerability in Microsoft Baseline Security Analyzer
CVE-2002-1762
Microsoft Baseline Security Analyzer (MBSA) 1.0 stores security scans in a known location C:\Documents and Settings\username\SecurityScans in plaintext, which could allow remote attackers to obtain sensitive information about the system via malicious active content such as ActiveX controls or Java.
EPSS: 0.159 (96.5th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Baseline_security_analyzer — versions 1.0
- N/a — versions n/a
References
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_XF)