CVE-2021-32067

Опубликовано: 13 авг. 2021

Источник: nvd

CVSS3: 6.5

CVSS2: 6.4

EPSS Низкий

Описание

The MiCollab Client Service component in Mitel MiCollab before 9.3 could allow an attacker to view sensitive system information through an HTTP response due to insufficient output sanitization.

Ссылки

https://www.mitel.com/support/security-advisories
Vendor Advisory
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0005
Vendor Advisory
https://www.mitel.com/support/security-advisories
Vendor Advisory
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0005
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mitel:micollab:*:*:*:*:*:-:*:*

Версия до 9.3 (исключая)

EPSS

Процентиль: 42%

0.002

Низкий

6.5 Medium

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-116

Связанные уязвимости

GHSA-7458-m52p-xfqf

github

больше 3 лет назад