{ "schema_version": "1.4.0", "id": "GHSA-7j3f-fv4w-h45m", "modified": "2022-05-13T01:49:18Z", "published": "2022-05-13T01:49:18Z", "aliases": [ "CVE-2018-11634" ], "details": "Plaintext Storage of Passwords in the administrative console in Dialogic PowerMedia XMS before 3.5 SU2 allows local users to access the web application's user passwords in cleartext by reading /var/www/xms/xmsdb/default.db.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-11634" }, { "type": "WEB", "url": "https://d3adend.org/blog/?p=1398" } ], "database_specific": { "cwe_ids": [ "CWE-522" ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2018-07-03T17:29:00Z" } }