CVE-2018-11634

PoC —

CVSS 3.0

7.8 high

EPSS

<1%p33

Published

Jul 3, 2018 (Jul 3, 2018)

Modified

Jun 17, 2026

Description

Plaintext Storage of Passwords in the administrative console in Dialogic PowerMedia XMS before 3.5 SU2 allows local users to access the web application's user passwords in cleartext by reading /var/www/xms/xmsdb/default.db.

Vendors: dialogic
Products: powermedia xms
Weakness: CWE-522
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.