CVE-2018-11637

Information leakage vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to read arbitrary files from the /var/ directory because a symlink exists under the web root.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2018-07-03

Last modified

2024-08-05

Weaknesses

CWE-59

Affected products

• Powermedia Xms (Dialogic)

References

• https://d3adend.org/blog/?p=1398