CVE-2015-4536 EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC tracing is configured, stores certain obfuscated password data in a log file, which allows remote authenticat...
LowCVSS 3.5
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC tracing is configured, stores certain obfuscated password data in a log file, which allows remote authenticated users to obtain sensitive information by reading this file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc documentum content server | = 7.0 | No fix listed |
| emc documentum content server | = 7.1 | No fix listed |
| emc documentum content server | = 7.2 | No fix listed |
References
- 20150817 ESA-2015-131: EMC Documentum Content Server Multiple Vulnerabilities mailing-list
- 76412 vdb-entry
- 1033296 vdb-entry