Improper access control in Windows Network File System allows an authorized attacker to disclose information locally.
CWE-284