CVE-2011-1424: Low severity dell emc sourceone vulnerability
The default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6 SP1, when the Mobile Services component is used, does not properly set the localOnly attribute of the trace element, which allows remote authenticated users to obtain sensitive information via ASP.NET Application Tracing.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1424?
CVE-2011-1424 has a medium severity rating due to its potential to expose sensitive information.
How do I fix CVE-2011-1424?
To fix CVE-2011-1424, update your ExShortcut\Web.config to properly set the localOnly attribute of the trace element.
Which versions of EMC SourceOne Email Management are affected by CVE-2011-1424?
CVE-2011-1424 affects EMC SourceOne Email Management versions prior to 6.6 SP1, including version 6.5.2.3668.
Can unprivileged users exploit CVE-2011-1424?
No, CVE-2011-1424 requires remote authenticated users to exploit the vulnerability.
What type of information is exposed due to CVE-2011-1424?
CVE-2011-1424 may expose sensitive information through the ASP.NET application due to misconfigured trace settings.