CVE-2015-0517: Emc Documentum d2

Medium severity, CVSS 4.0. EPSS: 1.2% chance of exploitation in the next 30 days.

The D2-API component in EMC Documentum D2 3.1 through SP1, 4.0 and 4.1 before 4.1 P22, and 4.2 before P11 places the MD5 hash of an encryption passphrase in log files, which allows remote authenticated users to obtain sensitive information by reading a file.

Affected products

• Emc Documentum d2: version 3.1 only; version 4.0 only; version 4.1 only; version 4.2 only

Published 2015-02-14. Last modified 2026-06-17.