Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to disclose information locally.
CWE-306