CVE-2011-1424
Last modified
CVE-2011-1424 is a vulnerability of currently unknown severity. The default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6 SP1, when the Mobile Services component is used, does not properly set the localOnly attribute of the trace element, which allows remote authenticated users to obtain sensitive information via ASP.NET Application Tracing.. EPSS estimates a 0.77% chance of exploitation in the next 30 days.
Description
The default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6 SP1, when the Mobile Services component is used, does not properly set the localOnly attribute of the trace element, which allows remote authenticated users to obtain sensitive information via ASP.NET Application Tracing.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Emc | Sourceone Email Management | <= 6.6.0.1209 |
| Emc | Sourceone Email Management | 6.5.2.3668 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2011-1424?
How severe is CVE-2011-1424?
How do I fix CVE-2011-1424?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2011
- CVE-2011-1418The stateless address autoconfiguration (aka SLAAC) function…
- CVE-2011-1419Apache Tomcat 7.x before 7.0.11, when web.xml has no securit…
- CVE-2011-1420EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solar…
- CVE-2011-1421EMC NetWorker 7.5.x before 7.5.4.3 and 7.6.x before 7.6.1.5,…
- CVE-2011-1422Cross-site scripting (XSS) vulnerability in an unspecified S…
- CVE-2011-1423Cross-site scripting (XSS) vulnerability in RSA Data Loss Pr…
- CVE-2011-1425xslt.c in XML Security Library (aka xmlsec) before 1.2.17, a…
- CVE-2011-1426The OpenURLInDefaultBrowser method in RealNetworks RealPlaye…
- CVE-2011-1427Multiple cross-site scripting (XSS) vulnerabilities in Kodak…
- CVE-2011-1428Wee Enhanced Environment for Chat (aka WeeChat) 0.3.4 and ea…
- CVE-2011-1429Mutt does not verify that the smtps server hostname matches …
- CVE-2011-1430The STARTTLS implementation in the server in Ipswitch IMail …
Are you affected by CVE-2011-1424?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST