CoreCVE
Back

HIGH

Incorrect Permission Assignment on the /var/www/xms/cleanzip.sh shell script run periodically in Dialogic PowerMedia XMS through 3.5 allows local users to execute code as the root user

Published Jul 3, 2018

Description

Incorrect Permission Assignment on the /var/www/xms/cleanzip.sh shell script run periodically in Dialogic PowerMedia XMS through 3.5 allows local users to execute code as the root user.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-732

Incorrect Permission Assignment

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jul 3, 2018
Updated Aug 5, 2024
Reserved May 31, 2018
Link CVE-2018-11642
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2018-11642
Red Hat
Severity n/a
Public date n/a
Links CVE-2018-11642