Improper access control in Windows NTFS allows an authorized attacker to disclose information locally.
CWE-290