CVE-2024-55550
Description
Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insufficient input sanitization. A successful exploit could allow the authenticated admin attacker to access resources that are constrained to the admin access level, and the disclosure is limited to non-sensitive system information. This vulnerability does not allow file modification or privilege escalation.
How to fix
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA due date: Jan 28, 2025Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mitel micollab | v ≤ 9.8.1.201 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.