CVE-2011-1424 - The default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6 SP1, when the Mobile Services component is used, does not properly set the localOnly attribute of the trace element, which allows remote authenticated users to obtain sensitive information via ASP.NET Application Tracing

Back Back to CVE browser

LOW

The default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6 SP1, when the Mobile Services component is used, does not properly set the localOnly attribute of the trace element, which allows remote authenticated users to obtain sensitive information via ASP.NET Application Tracing

Published May 24, 2011

3.5

LOW

CVSS 2.0

EPSS 0.77%

Description

The default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6 SP1, when the Mobile Services component is used, does not properly set the localOnly attribute of the trace element, which allows remote authenticated users to obtain sensitive information via ASP.NET Application Tracing.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-16

References (2)

http://securityreason.com/securityalert/8258
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/518003/100/0/threaded
mailing-listx_refsource_BUGTRAQ

Link	Providers	Tags
http://securityreason.com/securityalert/8258		third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/archive/1/518003/100/0/threaded		mailing-listx_refsource_BUGTRAQ

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner dell

Published May 24, 2011

Updated Aug 6, 2024

Reserved Mar 14, 2011

Link CVE-2011-1424

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2011-1424

Red Hat

Severity n/a

Public date n/a

Links CVE-2011-1424