Mitel MiCollab Path Traversal Vulnerability
Low CVSS 2.7 Listed in CISA KEV
Summary
Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker with administrative privileges to read local files within the system due to insufficient input sanitization. This vulnerability can be chained with CVE-2024-41713, which allows an unauthenticated, remote attacker to read arbitrary files on the server.
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- Mitel:MiCollab
- :
Sources
- CISA KEV DATABASE
- NVD DATABASE
Original Links
- https://nvd.nist.gov/vuln/detail/CVE-2024-55550 advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog kev
- https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2024-0029 reference
- https://www.mitel.com/support/security-advisories Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-55550 US Government Resource
Timeline
- kev_added CISA KEV
- kev_ingest CISA KEV
- nvd_ingest NVD