Security Advisory

CVE-2018-11639

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-07-03 17:00:00
Last updated 2024-08-05 08:17:08
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Plaintext Storage of Passwords within Cookies in /var/www/xms/application/controllers/verifyLogin.php in the administrative console in Dialogic PowerMedia XMS before 3.5 SU2 allows remote attackers to access a user's password in cleartext.