Unrated severityNVD Advisory· Published Feb 14, 2015· Updated May 6, 2026
CVE-2015-0517
CVE-2015-0517
Description
The D2-API component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 places the MD5 hash of an encryption passphrase in log files, which allows remote authenticated users to obtain sensitive information by reading a file.
Affected products
5cpe:2.3:a:emc:documentum_d2:3.1:-:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:emc:documentum_d2:3.1:-:*:*:*:*:*:*
- cpe:2.3:a:emc:documentum_d2:3.1:sp1:*:*:*:*:*:*
- cpe:2.3:a:emc:documentum_d2:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:emc:documentum_d2:4.1:*:*:*:*:*:*:*
- cpe:2.3:a:emc:documentum_d2:4.2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.securityfocus.com/bid/72501nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1031693nvdThird Party AdvisoryVDB Entry
- archives.neohapsis.com/archives/bugtraq/2015-02/0031.htmlnvdBroken Link
- exchange.xforce.ibmcloud.com/vulnerabilities/100874nvd
News mentions
0No linked articles in our index yet.