CVE-2011-1906

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-05-05 · updated 2026-06-16
Weakness: CWE-255

Description

Trustwave WebDefend Enterprise before 5.0 7.01.903-1.4 stores specific user-account credentials in a MySQL database, which makes it easier for remote attackers to read the event collection table via requests to the management port, a different vulnerability than CVE-2011-0756.

Affected products

Trustwave Webdefend: through 5.0; 2.0, 3.0

References

http://securitytracker.com/id?1025447
https://www.trustwave.com/spiderlabs/advisories/TWSL2011-001.txt
http://securitytracker.com/id?1025447
https://www.trustwave.com/spiderlabs/advisories/TWSL2011-001.txt

Get alerted when CVE-2011-1906 or the next vulnerability affects your stack