SQL Injection Vulnerability in Mitel MiCollab SAS Portal
CVE-2020-25608

7.2HIGH

Key Information:

Vendor
Mitel
Status
Micollab
Vendor
CVE Published:
18 December 2020

Summary

The SAS portal of Mitel MiCollab before version 9.2 is susceptible to SQL Injection attacks, allowing unauthorized access to sensitive user credentials. This vulnerability arises from insufficient input validation mechanisms, where an attacker can exploit the portal by injecting malicious SQL code, compromising the integrity and confidentiality of user data. Organizations using affected versions of MiCollab should prioritize remediation to safeguard against potential threats.

References

https://www.mitel.com/support/security-advisories
x_refsource_MISC

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.