Information disclosure in EMC Documentum Xcelerated Management System

CVE-2015-0527

EMC Documentum xCelerated Management System (xMS) 1.1 before P14 stores cleartext Windows Service credentials in a batch file during Documentum Platform and xCelerated Composition Platform (xCP) provisioning, which allows local users to obtain sensitive information by reading a file.

Vulnerability class: Information Disclosure

EPSS: 0.005 (38.8th percentile) — read the EPSS interpretation.

Affected products

Emc Documentum_xcelerated_management_system — versions 1.1
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)
security_alert@emc.com (x_refsource_MISC)