Improper Authorization Vulnerability in Mitel MiCollab API

CVE-2022-36453

Summary

A security vulnerability exists in the MiCollab Client API of Mitel MiCollab versions 9.1.3 through 9.5.0.101, which can be exploited by authenticated attackers. Due to insufficient authorization controls, an attacker is able to modify profile parameters, potentially gaining control over another user's extension number. This could lead to unauthorized actions and access within the communication system, raising significant security concerns for users utilizing affected versions of MiCollab.

References