CVE-2011-1906

2011-05-0514:55:03

CWE-255

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.005

Percentile

76.9%

JSON

Trustwave WebDefend Enterprise before 5.0 7.01.903-1.4 stores specific user-account credentials in a MySQL database, which makes it easier for remote attackers to read the event collection table via requests to the management port, a different vulnerability than CVE-2011-0756.

Affected configurations

Nvd

Node

trustwavewebdefendRange≤5.0enterprise

trustwavewebdefendMatch2.0enterprise

trustwavewebdefendMatch3.0enterprise

VendorProductVersionCPE
trustwavewebdefend*cpe:2.3:h:trustwave:webdefend:*:*:enterprise:*:*:*:*:*
trustwavewebdefend2.0cpe:2.3:h:trustwave:webdefend:2.0:*:enterprise:*:*:*:*:*
trustwavewebdefend3.0cpe:2.3:h:trustwave:webdefend:3.0:*:enterprise:*:*:*:*:*

Vendor	Product	Version	CPE
trustwave	webdefend	*	cpe:2.3:h:trustwave:webdefend:::enterprise:::::*
trustwave	webdefend	2.0	cpe:2.3:h:trustwave:webdefend:2.0::enterprise:::::
trustwave	webdefend	3.0	cpe:2.3:h:trustwave:webdefend:3.0::enterprise:::::