Improper authentication in Windows Event Tracing allows an authorized attacker to perform spoofing locally.
CWE-862