Improper privilege management in Windows Deployment Services allows an authorized attacker to disclose information locally.
CWE-862