CVE-2015-4537 | BDVDB-2026-71256 Detail

Description#

Lockbox in EMC Documentum D2 before 4.5 uses a hardcoded passphrase when a server lacks a D2.Lockbox file, which makes it easier for remote authenticated users to decrypt admin tickets by locating this passphrase in a decompiled D2 JAR archive.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://seclists.org/bugtraq/2015/Aug/117
http://www.securitytracker.com/id/1033345

Exploit#

No public exploit known

History#

Version 12015-08-22Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.