CVE-2018-11642

Incorrect Permission Assignment on the /var/www/xms/cleanzip.sh shell script run periodically in Dialogic PowerMedia XMS through 3.5 allows local users to execute code as the root user.
References
Link Resource
https://d3adend.org/blog/?p=1398 Exploit Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:dialogic:powermedia_xms:*:*:*:*:*:*:*:*

Information

Published : 2018-07-03 05:29

Updated : 2019-10-03 12:03


NVD link : CVE-2018-11642

Mitre link : CVE-2018-11642

Products Affected
No products.
CWE