high7.5
CVE-2018-11637
Information leakage vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to read arbitrary files from the…
Impact
Information leakage vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to read arbitrary files from the /var/ directory because a symlink exists under the web root.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dialogic | Powermedia Xms | through 3.5 |