CVE-2015-4536

Published: Aug 20, 2015Modified: May 6, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC tracing is configured, stores certain obfuscated password data in a log file, which allows remote authenticated users to obtain sensitive information by reading this file.

Affected (3)

Products: Emc: Documentum Content Server

1 product

Documentum Content Server

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Emc Documentum Content Server	Version 7.0
Emc Documentum Content Server	Version 7.1
Emc Documentum Content Server	Version 7.2

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

http://seclists.org/bugtraq/2015/Aug/86

Source: security_alert@emc.com

http://www.securityfocus.com/bid/76412

Source: security_alert@emc.com

http://www.securitytracker.com/id/1033296

Source: security_alert@emc.com

http://seclists.org/bugtraq/2015/Aug/86

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/76412

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1033296

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.