VYPR
← All advisories
Unrated severityNVD Advisory· Published May 5, 2011· Updated Jun 16, 2026

CVE-2011-1906

CVE-2011-1906

Description

Trustwave WebDefend Enterprise before 5.0 7.01.903-1.4 stores specific user-account credentials in a MySQL database, which makes it easier for remote attackers to read the event collection table via requests to the management port, a different vulnerability than CVE-2011-0756.

Affected products

4
  • Trustwave/Webdefend3 versions
    cpe:2.3:h:trustwave:webdefend:2.0:*:enterprise:*:*:*:*:*+ 2 more
    • cpe:2.3:h:trustwave:webdefend:2.0:*:enterprise:*:*:*:*:*
    • cpe:2.3:h:trustwave:webdefend:3.0:*:enterprise:*:*:*:*:*
    • cpe:2.3:h:trustwave:webdefend:*:*:enterprise:*:*:*:*:*range: <=5.0
  • Trustwave/WebDefend Enterprisellm-fuzzy
    Range: <5.0 7.01.903-1.4

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.