CoreCVE
Back

HIGH

Plaintext Storage of Passwords in the administrative console in Dialogic PowerMedia XMS before 3.5 SU2 allows local users to access the web application's user passwords in cleartext by reading /var/www/xms/xmsdb/default.db

Published Jul 3, 2018

Description

Plaintext Storage of Passwords in the administrative console in Dialogic PowerMedia XMS before 3.5 SU2 allows local users to access the web application's user passwords in cleartext by reading /var/www/xms/xmsdb/default.db.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-522

Insufficiently Protected Credentials

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jul 3, 2018
Updated Aug 5, 2024
Reserved May 31, 2018
Link CVE-2018-11634
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-11634
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-11634