Microsoft Index Server allows remote attackers to determine the real path for a web directory via a request to an Internet Data Query file that does not exist.
No PoCs from references.
- https://github.com/ARPSyndicate/cve-scores
- https://github.com/EdoWhite/CVEtoMS