CVE-2015-0517 The D2-API component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 places the MD5 hash of an encryption passphrase in log files, which allows remote authenticate...
MediumCVSS 4.0
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The D2-API component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 places the MD5 hash of an encryption passphrase in log files, which allows remote authenticated users to obtain sensitive information by reading a file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc documentum d2 | = 3.1 | No fix listed |
| emc documentum d2 | = 3.1-sp1 | No fix listed |
| emc documentum d2 | = 4.0 | No fix listed |
| emc documentum d2 | = 4.1 | No fix listed |
| emc documentum d2 | = 4.2 | No fix listed |
References
- 20150204 ESA-2015-010: EMC Documentum D2 Multiple Vulnerabilities broken-link mailing-list
- 72501 third-party-advisory vdb-entry
- 1031693 third-party-advisory vdb-entry
- emc-documentum-cve20150517-info-disc(100874) vdb-entry