Skip to content
OpenAdvisories
Unscored CVE-2018-11637 EUVD-2018-3660GHSA-mmrc-237m-92x8

Information leakage vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to read arbi…

Published Jul 3, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

Information leakage vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to read arbitrary files from the /var/ directory because a symlink exists under the web root.

References