ESA-2015-131: EMC Documentum Content Server Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-131: EMC Documentum Content Server Multiple Vulnerabilities EMC Identifier: ESA-2015-131 CVE Identifier: CVE-2015-4531, CVE-2015-4532, CVE-2015-4533, CVE-2015-4534, CVE-2015-4535, CVE-2015-4536 Severity Rating: CVSS v2 Base Score: See below f...

CVE-2015-4536

creationtimestamp| type| source ---|---|--- 2015-08-21 13:00:41+00:00| seen| MISP/55d720e0-f5c8-4290-ba7f-289f0a00020f...

CVE-2015-4536

Summary (CVE-2015-4536) EMC Documentum Content Server versions affected are 7.0 prior to P20, 7.1 prior to P18, and 7.2 prior to P02. When RPC tracing is enabled, obfuscated passwords of users with inline authentication are written to the log file in clear text, enabling a remote authenticated at...

EMC Documentum Content Server Information Disclosure (ESA-2015-131)

The version of EMC Documentum Content Server running on the remote host is affected an information disclosure vulnerability due to passwords being stored as plaintext in log files for users with inline authentication. An authenticated, remote attacker with access to the log files can exploit this...