CVE-2018-11641

2018-07-0317:00:00

mitre

www.cve.org

AI Score

9.5

Confidence

High

EPSS

0.01

Percentile

83.7%

JSON

Use of Hard-coded Credentials in /var/www/xms/application/controllers/gatherLogs.php in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to interact with a web service.

References

d3adend.org/blog/?p=1398