CVE-2011-1424

low Microsoft
CVSS v3 Base Score
3.5
AV:N/AC:M/Au:S/C:P/I:N/A:N
EPSS Score
0.2%
Exploitation probability in 30 days
Top 63% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
M
Confidentiality
P
Integrity
None
Availability
None
Published: May 24, 2011 (5469 days ago)
Last Modified: April 29, 2026
Vendor: Microsoft
Source: NVD

Description

The default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6 SP1, when the Mobile Services component is used, does not properly set the localOnly attribute of the trace element, which allows remote authenticated users to obtain sensitive information via ASP.NET Application Tracing.

CWE

CWE-16

Affected Products

emc sourceone email management

References

🔗 securityreason.com 🔗 www.securityfocus.com 🔗 securityreason.com 🔗 www.securityfocus.com