Unscored CVE-2015-0517 EUVD-2015-0530GHSA-mpjc-cxg4-vcrm

The D2-API component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 places the MD5 hash of an encrypt…

Published Feb 14, 2015 · Updated Aug 6, 2024 · Assigned by dell

Description

The D2-API component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 places the MD5 hash of an encryption passphrase in log files, which allows remote authenticated users to obtain sensitive information by reading a file.

References

emc-documentum-cve20150517-info-disc(100874) vdb-entry
1031693 vdb-entry
72501 vdb-entry
20150204 ESA-2015-010: EMC Documentum D2 Multiple Vulnerabilities mailing-list