CVE-2012-2531

CVE-2012-2531 describes a password disclosure vulnerability in Microsoft Internet Information Services (IIS) 7.5, affecting Windows 7 and Windows Server 2008. The vulnerability stems from weak permissions on the IIS Operational log, allowing local users to read sensitive credentials. With a CVSS score of 2.1, this is a low-severity vulnerability requiring local access and user interaction for exploitation, primarily impacting confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.