CVE-2022-41326 - The web conferencing component of Mitel MiCollab through 9.6.0.13 could allow an unauthenticated attacker to upload arbitrary scripts due to improper authorization controls

Back Back to CVE browser

CRITICAL

The web conferencing component of Mitel MiCollab through 9.6.0.13 could allow an unauthenticated attacker to upload arbitrary scripts due to improper authorization controls

Published Nov 22, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 1.48%

Description

The web conferencing component of Mitel MiCollab through 9.6.0.13 could allow an unauthenticated attacker to upload arbitrary scripts due to improper authorization controls. A successful exploit could allow remote code execution within the context of the application.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-862

Missing Authorization

References (2)

https://www.mitel.com/support/security-advisories
Vendor Advisory
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0009
MitigationVendor Advisory

Link	Providers	Tags
https://www.mitel.com/support/security-advisories		Vendor Advisory
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0009		MitigationVendor Advisory