VBA : Internal information leak

System configuration leak is possible. This can help an attacker to create a plan of attack.

The debug information and error messages depending on the system settings can be written to the log, outputted to the console, or sent to the user. In some cases, an attacker can make a conclusion about the system vulnerabilities from the error message. For example, a database error can indicate insecurity against attacks such as SQL injection. Information about the version of the operating system, application server and system configuration can also be of value to the attacker.

In this case, we are talking about an internal leak: system information is stored in the local file or event log or is displayed on the screen.