Microsoft Baseline Security Analyzer Vulnerability Exposing Sensitive Data

CVE-2002-1762

Summary

Microsoft Baseline Security Analyzer (MBSA) 1.0 is susceptible to a vulnerability that allows sensitive system information to be stored in plaintext within the directory C:\Documents and Settings\username\SecurityScans. This exposure can be exploited by remote attackers using malicious active content, such as ActiveX controls or Java, enabling them to access the stored sensitive data. Proper security measures should be implemented to protect against unauthorized access to these security scan results to mitigate potential risks.

References