CVE-2011-1424
First published: Tue May 24 2011(Updated: )
The default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6 SP1, when the Mobile Services component is used, does not properly set the localOnly attribute of the trace element, which allows remote authenticated users to obtain sensitive information via ASP.NET Application Tracing.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dell EMC SourceOne | <=6.6.0.1209 | |
| Dell EMC SourceOne | =6.5.2.3668 | |
| Microsoft Exchange | ||
| IBM Lotus Domino Mail Server | ||
| IBM Notes |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2011-1424?
CVE-2011-1424 has a medium severity rating due to its potential to expose sensitive information.
How do I fix CVE-2011-1424?
To fix CVE-2011-1424, update your ExShortcut\Web.config to properly set the localOnly attribute of the trace element.
Which versions of EMC SourceOne Email Management are affected by CVE-2011-1424?
CVE-2011-1424 affects EMC SourceOne Email Management versions prior to 6.6 SP1, including version 6.5.2.3668.
Can unprivileged users exploit CVE-2011-1424?
No, CVE-2011-1424 requires remote authenticated users to exploit the vulnerability.
What type of information is exposed due to CVE-2011-1424?
CVE-2011-1424 may expose sensitive information through the ASP.NET application due to misconfigured trace settings.
- collector/nvd-historical
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/emc
- canonical/dell emc sourceone
- version/dell emc sourceone/6.6.0.1209
- version/dell emc sourceone/6.5.2.3668
- vendor/microsoft
- canonical/microsoft exchange
- vendor/ibm
- canonical/ibm lotus domino mail server
- canonical/ibm notes