PT-2015-4691 · Microsoft+1 · Windows+1

Published 2015-03-24 · Updated 2015-07-28 · CVE-2015-0527

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions EMC Documentum xCelerated Management System (xMS) version 1.1 before P14

Description The issue allows local users to obtain sensitive information by reading a file, as cleartext Windows Service credentials are stored in a batch file during provisioning.

Recommendations For version 1.1 before P14, apply patch P14 to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-0527

Affected Products

Emc Documentum Xcelerated Management System

Windows

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-0527 · Security Note
• http://packetstormsecurity.com/files/130959/EMC-Documentum-xMS-Sensitive-Information-Disclosure.html · Note
• http://seclists.org/bugtraq/2015/Mar/134 · Note