Unauthenticated SQL Injection Vulnerability in Mitel MiCollab's API Interface
CVE-2024-47189

7.7HIGH

Key Information:

Vendor

Mitel
Status
Micollab
Vendor
CVE Published:
21 October 2024

What is CVE-2024-47189?

The API Interface of the Mitel MiCollab component, particularly in versions up to 9.8 SP1 FP2, is vulnerable to SQL injection attacks. This vulnerability arises from inadequate sanitization of user-provided input, which can be exploited by an unauthenticated attacker. Successful exploitation allows access to user provisioning information and the execution of arbitrary SQL commands, potentially compromising system integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.mitel.com/support/security-advisories/mitel-p...

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.