Improper Authentication in Mitel MiCollab Web Conferencing Component

CVE-2023-25597

Summary

A security flaw exists in the web conferencing component of Mitel MiCollab versions through 9.6.2.9, which could be exploited by an unauthenticated attacker. This vulnerability allows the attacker to craft a request that could facilitate the download of shared files by revealing their exact path and filename. The lack of proper authentication controls could lead to unauthorized access to sensitive files, posing significant risks to data confidentiality.

References