CVE-2011-1424
- State
- Published
- Severity
- Not scored
- Published
- May 24, 2011
- Updated
- Aug 6, 2024
- Reserved
- Mar 14, 2011
Description
The default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6 SP1, when the Mobile Services component is used, does not properly set the localOnly attribute of the trace element, which allows remote authenticated users to obtain sensitive information via ASP.NET Application Tracing.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 8258third-party-advisory
- 20110513 ESA-2011-016: EMC SourceOne ASP.NET application tracing information disclosure vulnerabilitymailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.