CVE-2015-4535: Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before...

Security readout for executives and security teams

This flaw can let an authenticated Documentum user become a super-user if Java Method Server debug tracing is enabled and sensitive login tickets are written to readable logs. It affects older EMC Documentum Content Server patch levels. The business risk is unauthorized administrative control over a content platform that may hold regulated or sensitive documents. Exposure is limited to EMC Documentum Content Server deployments on vulnerable patch levels with __debug_trace__ configured and reachable by authenticated users. Prioritize remediation for any internet-accessible or broadly user-accessible Documentum environment, especially where sensitive records are stored or privileged workflows depend on Content Server integrity. Mitigation focus: Upgrade to the fixed EMC Documentum Content Server patch level or later for your release branch.; Disable __debug_trace__ where not operationally required.; Review EMC advisory ESA-2015-131 for supported remediation guidance..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.