CVE-2011-1906

NONE

Published May 5, 201115y ago · Modified Jun 16, 20262w ago

Published May 5, 2011 15y ago

Last Modified Jun 16, 2026 2w ago

Description

Trustwave WebDefend Enterprise before 5.0 7.01.903-1.4 stores specific user-account credentials in a MySQL database, which makes it easier for remote attackers to read the event collection table via requests to the management port, a different vulnerability than CVE-2011-0756.

Threat Intelligence

No active exploitation signals — not in CISA KEV and no EPSS score yet.

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-255

Affected Products 3

Vendor	Product	Version	Range
trustwave	webdefend	*	≤5.0
trustwave	webdefend	2.0	any
trustwave	webdefend	3.0	any

References 2

securitytracker.com http://securitytracker.com/id?1025447
trustwave.com https://www.trustwave.com/spiderlabs/advisories/TWSL2011-001.txt

Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.