CVE-2018-11641

Use of Hard-coded Credentials in /var/www/xms/application/controllers/gatherLogs.php in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to interact with a web service.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-07-03

Last modified

2024-08-05

Weaknesses

CWE-798

Affected products

• Powermedia Xms (Dialogic)

References

• https://d3adend.org/blog/?p=1398