CoreCVE
Back

HIGH

Information leakage vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to read arbitrary files from the /var/ directory because a symlink exists under the web root

Published Jul 3, 2018

Description

Information leakage vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to read arbitrary files from the /var/ directory because a symlink exists under the web root.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-59

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jul 3, 2018
Updated Aug 5, 2024
Reserved May 31, 2018
Link CVE-2018-11637
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-11637
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-11637