CVE-2011-1424 in SourceOne Email Managementinfo

Summary

The default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6 SP1, when the Mobile Services component is used, does not properly set the localOnly attribute of the trace element, which allows remote authenticated users to obtain sensitive information via ASP.NET Application Tracing.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservation

03/14/2011

Disclosure

05/24/2011

CPE

ready

CVSS

4.3

EPSS

0.00162

Activities

Very Low

Sources

Might our Artificial Intelligence support you?

Check our Alexa App!