Man-In-the-Middle Vulnerability in Mitel MiCollab and AWV Components

CVE-2021-32068

Summary

The vulnerability present in Mitel's MiCollab and AWV Client Service allows a potential attacker to exploit insufficient TLS session controls by sending multiple session renegotiation requests. This flaw could lead to a Man-In-the-Middle attack, enabling the attacker to intercept and modify application data and state, compromising the integrity and confidentiality of communications.

References