CVE-2018-18819

Опубликовано: 12 нояб. 2019

Источник: nvd

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

A vulnerability in the web conference chat component of MiCollab, versions 7.3 PR6 (7.3.0.601) and earlier, and 8.0 (8.0.0.40) through 8.0 SP2 FP2 (8.0.2.202), and MiVoice Business Express versions 7.3 PR3 (7.3.1.302) and earlier, and 8.0 (8.0.0.40) through 8.0 SP2 FP1 (8.0.2.202), could allow creation of unauthorized chat sessions, due to insufficient access controls. A successful exploit could allow execution of arbitrary commands.

Ссылки

https://www.mitel.com/support/security-advisories
Vendor Advisory
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-18-0012
Vendor Advisory
https://www.mitel.com/support/security-advisories
Vendor Advisory
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-18-0012
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mitel:micollab:*:*:*:*:*:*:*:*

Версия от 7.3 (включая) до 7.3.0.601 (включая)

cpe:2.3:a:mitel:micollab:*:*:*:*:*:*:*:*

Версия от 8.0.0.40 (включая) до 8.0.2.202 (включая)

cpe:2.3:a:mitel:mivoice_business_express:*:*:*:*:*:*:*:*

Версия от 7.0 (включая) до 7.3.1.302 (включая)

cpe:2.3:a:mitel:mivoice_business_express:*:*:*:*:*:*:*:*

Версия от 8.0.0.40 (включая) до 8.0.2.202 (включая)

EPSS

Процентиль: 56%

0.00343

Низкий

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-863

Связанные уязвимости

GHSA-m8mf-8j96-ph83