VYPR
← All advisories
Unrated severityNVD Advisory· Published May 5, 2011· Updated Apr 29, 2026

CVE-2011-1906

CVE-2011-1906

Description

Trustwave WebDefend Enterprise before 5.0 7.01.903-1.4 stores specific user-account credentials in a MySQL database, which makes it easier for remote attackers to read the event collection table via requests to the management port, a different vulnerability than CVE-2011-0756.

Affected products

3
  • Trustwave/Webdefend3 versions
    cpe:2.3:h:trustwave:webdefend:2.0:*:enterprise:*:*:*:*:*+ 2 more
    • cpe:2.3:h:trustwave:webdefend:2.0:*:enterprise:*:*:*:*:*
    • cpe:2.3:h:trustwave:webdefend:3.0:*:enterprise:*:*:*:*:*
    • cpe:2.3:h:trustwave:webdefend:*:*:enterprise:*:*:*:*:*range: <=5.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.