CVE-2011-1424

The default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6 SP1, when the Mobile Services component is used, does not…

published May 24, 2011

CVSS
—
EPSS
1%
Percentile
55.0
In the wild
Unconfirmed
What it is

The default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6 SP1, when the Mobile Services component is used, does not properly set the localOnly attribute of the trace element, which allows remote authenticated users to obtain sensitive information via ASP.NET Application Tracing.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00773 · 55.0th percentile
Published
2011-05-24T23:00Z
EPSS history
Timeline
  • 24 MAY 23:00Z
    The default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6 SP1, when the Mobile Services component is used, does not…
    cvelistv5