106 matches found
CVE-2018-11636
CVE-2018-11636 affects Dialogic PowerMedia XMS (admin console) up to version 3.5. It is a cross-site request forgery (CSRF) vulnerability that enables remote attackers to perform malicious and unauthorized actions. The root cause is CSRF in the administrative interface, with impact described as p...
CVE-2018-11641
Use of Hard-coded Credentials in /var/www/xms/application/controllers/gatherLogs.php in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to interact with a web service...
CVE-2018-11640
Affected product: Dialogic PowerMedia XMS (web service). Vulnerability: XML External Entity (XXE) injection in the web service. Versions affected: PowerMedia XMS before 3.5 SU2. Impact: remote attacker can read arbitrary files or cause denial of service (resource consumption). Severity: CVSS v3 b...
CVE-2018-11634
Plaintext Storage of Passwords in the administrative console in Dialogic PowerMedia XMS before 3.5 SU2 allows local users to access the web application's user passwords in cleartext by reading /var/www/xms/xmsdb/default.db...
CVE-2018-11641
The vulnerability CVE-2018-11641 affects Dialogic PowerMedia XMS (administrative console) where the file /var/www/xms/application/controllers/gatherLogs.php uses hard-coded credentials. This allows remote attackers to interact with the web service in PowerMedia XMS 3.5 and earlier. Root cause is ...
CVE-2018-11639
Dialogic PowerMedia XMS prior to version 3.5 SU2 suffers a vulnerability where passwords are stored in plaintext inside cookies handled by /var/www/xms/application/controllers/verifyLogin.php. This plaintext storage enables remote attackers to access user passwords in cleartext. The CVE entry cit...
CVE-2018-11637
The Dialogic PowerMedia XMS information disclosure (CVE-2018-11637) affects PowerMedia XMS 3.5 and earlier. A symbolic link in the web root enables remote attackers to read files under /var/, due to a web-root symlink. Impact: information leakage via administrative console exposure. Root cause: s...
XenMobile - Unable to access the GUI console of XMS server over 4443
After building new node to add to cluster, the console address for administration is listed as https://ipaddress/uw which cannot be connected to...
How to disable SSL protocols on XenMobile server
XenMobile Server by default supports SSL protocols TLSv1.0, TLSv1.1, TLSv1.2. We can disable or enable the protocols from the XMS CLI console...
Failed to update listener certificate in XMS 10.6
While importing renewed SSL listener certificate on XMS 10.6 following error is observed on XMS debug logs. 2017-06-22T11:47:55.251+0300 | A7B895C5041828EC | INFO | http-nio-14443-exec-7 | com.citrix.controlpoint.rest.CertificateMgmtResource | Uploading certificate to be used As : listener . none...
License count is incorrect on XMS console
We see consumed licenses on XMS console under Licensing tab is more while the total number of enrolled devices is less pulled a report from XM. The license file has been re-read on the licensing server and there is no change...
SecureHub prompting for login even though timeout is correctly set or even while using non MDX apps
SecureHub keeps prompting to login randomly even though the timeouts are correctly set on XMS server...
ISSUE: Policy state pending or failed for Android devices
This purpose of this article is to help Xenmobile administrator troubleshoot issues related to Android policy deployment failures and also provide additional information on settings up XMS server with right values...
How to Enable App Interaction Between XenMobile Secure Mail and Microsoft Office Apps
This document will help you understand how the XenMobile managed Secure Mail application will use Microsoft Office application to open the attachments in a controlled and secured manner. Environment Machine| Details ---|--- Active Directory| Win 2012 Certificate Authority| NA SQL Database| MS SQL...
How to Reset XMS Administrator Password in Microsoft SQL
This article describesHow to Reset XMS Administrator Password in Microsoft SQL...
XMS is unable to connect to DEP - Error: "Connection failed" when testing the connection
In the XMS console, inside iOS Bulk Enrollment DEP Configuration, when importing the Token file from the DEP Portal, the connectivity test is failing with error "Connection Failed". However, XMS connectivity tests are showing that XMS is able to reach Apple's websites, the ports are correctly...
ESA-2015-044: EMC Documentum xMS Sensitive Information Disclosure Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2015-044: EMC Documentum xMS Sensitive Information Disclosure Vulnerability EMC Identifier: ESA-2015-044 CVE Identifier: CVE-2015-0527 Severity Rating: CVSS v2 Base Score: 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C Affected products: • EMC Documentum xCelerat...
CVE-2015-0527
EMC Documentum xCelerated Management System (xMS) 1.1 prior to P14 contains a sensitive information disclosure vulnerability where Windows Service credentials are stored in plaintext in batch files during provisioning of Documentum Platform or xCP. Local users can read these files to obtain crede...
WordPress Markant Theme Arbitrary File Download Vulnerability
Exploit for php platform in category web applications Poc: http://localhost/wp-content/themes/markant/download.php?file=../../wp-config.php Demo: http://www.markant.org/wp-content/themes/markant/download.php?file=../../wp-config.php --------------------------------------- Greetz to : All Egy-Shel...
