CVE-2002-1762 Microsoft Baseline Security Analyzer (MBSA) 1.0 stores security scans in a known location C:\Documents and Settings\username\SecurityScans in plaintext, which could allow remote attackers to obtain se...
MediumCVSS 5.0
EPSS 15.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Baseline Security Analyzer (MBSA) 1.0 stores security scans in a known location C:\Documents and Settings\username\SecurityScans in plaintext, which could allow remote attackers to obtain sensitive information about the system via malicious active content such as ActiveX controls or Java.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft baseline security analyzer | = 1.0 | No fix listed |
References
- 20020425 Microsoft Baseline Security Analyzer exploit (Exposed vulnerabilities' list) mailing-list
- 4594 exploit vdb-entry
- mbsa-plaintext-system-info(8947) vdb-entry