CVE-2011-1906 Trustwave WebDefend Enterprise before 5.0 7.01.903-1.4 stores specific user-account credentials in a MySQL database, which makes it easier for remote attackers to read the event collection table via r...
MediumCVSS 5.0
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Trustwave WebDefend Enterprise before 5.0 7.01.903-1.4 stores specific user-account credentials in a MySQL database, which makes it easier for remote attackers to read the event collection table via requests to the management port, a different vulnerability than CVE-2011-0756.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trustwave webdefend | <= 5.0 | No fix listed |
| trustwave webdefend | = 2.0 | No fix listed |
| trustwave webdefend | = 3.0 | No fix listed |
References
- 1025447 vdb-entry
- www.trustwave.com vendor-advisory