CVE-2011-1424

LOW 3.5CVE-2011-1424 · Published 24/05/2011 · updated 16/06/2026

In short

CVE-2011-1424 is a LOW (CVSS 3.5) vulnerability affecting sourceone email management (emc).
Chance of exploitation in the next 30 days (EPSS): 0.77%, higher than 55.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
sourceone email management emc	`= 6.5.2.3668≤ 6.6.0.1209`	No fix yet

Description

The default configuration of ExShortcut\Web.config in EMC SourceOne Email Management before 6.6 SP1, when the Mobile Services component is used, does not properly set the localOnly attribute of the trace element, which allows remote authenticated users to obtain sensitive information via ASP.NET Application Tracing.

References

securityreason.com/securityalert/8258
securityfocus.com/archive/1/518003/100/0/threaded

More vulnerabilities in sourceone email management

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free