CVE-2015-4536

Description

EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC tracing is configured, stores certain obfuscated password data in a log file, which allows remote authenticated users to obtain sensitive information by reading this file.

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• http://seclists.org/bugtraq/2015/Aug/86
• http://www.securityfocus.com/bid/76412
• http://www.securitytracker.com/id/1033296
• http://seclists.org/bugtraq/2015/Aug/86
• http://www.securityfocus.com/bid/76412
• http://www.securitytracker.com/id/1033296

CWEs

CWE-200