Security Advisory
CVE-2018-11637
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Information leakage vulnerability in the administrative console in Dialogic PowerMedia XMS through 3.5 allows remote attackers to read arbitrary files from the /var/ directory because a symlink exists under the web root.