Description
EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC tracing is configured, stores certain obfuscated password data in a log file, which allows remote authenticated users to obtain sensitive information by reading this file.
References
- 1033296 vdb-entry
- 20150817 ESA-2015-131: EMC Documentum Content Server Multiple Vulnerabilities mailing-list
- 76412 vdb-entry