PT-2015-4691 · Microsoft+1 · Windows+1

Publicado 2015-03-24 · Atualizado 2015-07-28 · CVE-2015-0527

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions EMC Documentum xCelerated Management System (xMS) version 1.1 before P14

Description The issue allows local users to obtain sensitive information by reading a file, as cleartext Windows Service credentials are stored in a batch file during provisioning.

Recommendations For version 1.1 before P14, apply patch P14 to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-0527

Produtos afetados

Emc Documentum Xcelerated Management System

Windows

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-0527 · Nota de Segurança
• http://packetstormsecurity.com/files/130959/EMC-Documentum-xMS-Sensitive-Information-Disclosure.html · Nota
• http://seclists.org/bugtraq/2015/Mar/134 · Nota