EMC Documentum D2 Cross-Site Scripting Vulnerability

EMC Documentum D2 is the advanced, intuitive, configurable and content-centric Documentum client that accelerates adoption of ECM applications. EMC Documentum D2 version 4.5 contains a cross-site scripting vulnerability that could allow an attacker to inject malicious HTML or script...

EMC Documentum Thumbnail Server Directory Traversal Vulnerability

EMC Documentum Thumbnail Server is the HTTP server. EMC Documentum Thumbnail Server has a directory traversal vulnerability in its implementation that could allow a malicious user to gain unauthorized access to Content Server content...

ESA-2015-044: EMC Documentum xMS Sensitive Information Disclosure Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-044: EMC Documentum xMS Sensitive Information Disclosure Vulnerability EMC Identifier: ESA-2015-044 CVE Identifier: CVE-2015-0527 Severity Rating: CVSS v2 Base Score: 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C Affected products: • EMC Documentum xCelerat...

EMC Documentum xCelerated Management System information disclosure

Service password is stored in .bat file...

CVE-2015-0527

EMC Documentum xCelerated Management System xMS 1.1 before P14 stores cleartext Windows Service credentials in a batch file during Documentum Platform and xCelerated Composition Platform xCP provisioning, which allows local users to obtain sensitive information by reading a file...

Design/Logic Flaw

EMC Documentum xCelerated Management System xMS 1.1 before P14 stores cleartext Windows Service credentials in a batch file during Documentum Platform and xCelerated Composition Platform xCP provisioning, which allows local users to obtain sensitive information by reading a file...

EMC Documentum xCelerated Management System Information Disclosure Vulnerability

EMC Documentum xCelerated Management System xMS is an EMC technology that simplifies and accelerates the deployment of Documentum content management system into VMware-based private cloud environments. An information disclosure vulnerability exists in the EMC Documentum xCelerated Management...

PT-2015-4691

Name of the Vulnerable Software and Affected Versions EMC Documentum xCelerated Management System xMS version 1.1 before P14 Description The issue allows local users to obtain sensitive information by reading a file, as cleartext Windows Service credentials are stored in a batch file during...

CVE-2015-0527: Exposure of Sensitive Information to an Unauthorized Actor

EMC Documentum xCelerated Management System xMS 1.1 before P14 stores cleartext Windows Service credentials in a batch file during Documentum Platform and xCelerated Composition Platform xCP provisioning, which allows local users to obtain sensitive information by reading a file...

CVE-2015-0527

EMC Documentum xCelerated Management System xMS 1.1 before P14 stores cleartext Windows Service credentials in a batch file during Documentum Platform and xCelerated Composition Platform xCP provisioning, which allows local users to obtain sensitive information by reading a file...

CVE-2015-0527

EMC Documentum xCelerated Management System (xMS) 1.1 prior to P14 contains a sensitive information disclosure vulnerability where Windows Service credentials are stored in plaintext in batch files during provisioning of Documentum Platform or xCP. Local users can read these files to obtain crede...

ESA-2015-010: EMC Documentum D2 Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-010: EMC Documentum D2 Multiple Vulnerabilities EMC Identifier: ESA-2015-010 CVE Identifier: CVE-2015-0517, CVE-2015-0518 Affected products: • EMC Documentum D2 3.1 and all patch versions • EMC Documentum D2 3.1 SP1 and all patch versions • E...

CVE-2015-0518

The Properties service in the D2FS web-service component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 allows remote authenticated users to obtain superuser privileges via an unspecified method call that modifies group permissions...

CVE-2015-0517

The D2-API component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 places the MD5 hash of an encryption passphrase in log files, which allows remote authenticated users to obtain sensitive information by reading a file...

Design/Logic Flaw

The D2-API component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 places the MD5 hash of an encryption passphrase in log files, which allows remote authenticated users to obtain sensitive information by reading a file...

CVE-2015-0518

EMC Documentum D2 (D2FS web service Properties component) is affected by CVE-2015-0518. A flaw in the D2FS Properties service allows a remote authenticated, low-privilege D2 user to modify group permissions and escalate to superuser privileges. Affected products/versions include D2 3.1 through SP...

CVE-2015-0518

The Properties service in the D2FS web-service component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 allows remote authenticated users to obtain superuser privileges via an unspecified method call that modifies group permissions...

CVE-2015-0517

The D2-API component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 places the MD5 hash of an encryption passphrase in log files, which allows remote authenticated users to obtain sensitive information by reading a file...

CVE-2015-0517

EMC Documentum D2 vulnerability CVE-2015-0517 affects D2-API logging the MD5 hash of the passphrase used to encrypt credentials. Affected: EMC Documentum D2 3.1 (SP1), 4.0, 4.1 before 4.1 P22, and 4.2 before P11. Consequence: potential exposure of the passphrase if an attacker accesses log files....

CVE-2015-0517: Exposure of Sensitive Information to an Unauthorized Actor

The D2-API component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 places the MD5 hash of an encryption passphrase in log files, which allows remote authenticated users to obtain sensitive information by reading a file...