« Volver al listado

CVE-2011-1906

Estado: ModificadaMedia (5)—

Trustwave WebDefend Enterprise before 5.0 7.01.903-1.4 stores specific user-account credentials in a MySQL database, which makes it easier for remote attackers to read the event collection table via requests to the management port, a different vulnerability than CVE-2011-0756.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Trustwave — Webdefend

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-1906",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-05-05T14:55:03.683",
  "references": [
    {
      "url": "http://securitytracker.com/id?1025447",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.trustwave.com/spiderlabs/advisories/TWSL2011-001.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1025447",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.trustwave.com/spiderlabs/advisories/TWSL2011-001.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Trustwave WebDefend Enterprise before 5.0 7.01.903-1.4 stores specific user-account credentials in a MySQL database, which makes it easier for remote attackers to read the event collection table via requests to the management port, a different vulnerability than CVE-2011-0756."
    },
    {
      "lang": "es",
      "value": "Trustwave WebDefend Enterprise anteriores a v5.07.01.903-1.4 almacena credenciales específicas de cuentas de usuario en una base de datos MySQL, lo que hace que sea más fácil para los atacantes remotos leer la tabla de recopilación de eventos a través de peticiones al puerto de gestión, una vulnerabilidad diferente de CVE-2011-0756."
    }
  ],
  "lastModified": "2026-06-16T23:30:20.870",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:trustwave:webdefend:*:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "90378BBE-CB8E-40E3-86E2-0403C9B7A867",
              "versionEndIncluding": "5.0"
            },
            {
              "criteria": "cpe:2.3:h:trustwave:webdefend:2.0:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "90F67FF2-A1D8-4658-869A-9F9B24D28227"
            },
            {
              "criteria": "cpe:2.3:h:trustwave:webdefend:3.0:*:enterprise:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4C3A057E-61BA-484B-87BF-AB4E264E5D85"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}