Improper access control in Windows Server for NFS allows an authorized attacker to disclose information locally.
CWE-284, CWE-497