CVE-2024-42514

Опубликовано: 01 окт. 2024

Источник: nvd

CVSS3: 8.1

EPSS Низкий

Описание

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.1.0.4 could allow an unauthenticated attacker to conduct an unauthorized access attack due to inadequate access control checks. A successful exploit requires user interaction and could allow an attacker to access sensitive information and send unauthorized messages during an active chat session.

Ссылки

https://www.mitel.com/-/media/mitel/file/pdf/support/security-advisories/security-bulletin_24-0024-001-v2.pdf
Broken Link
https://www.mitel.com/support/security-advisories
Vendor Advisory
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0024
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mitel:micontact_center_business:*:*:*:*:*:*:*:*

Версия до 10.1.0.4 (включая)

EPSS

Процентиль: 53%

0.003

Низкий

8.1 High

CVSS3

Дефекты

CWE-284

Связанные уязвимости

GHSA-jq66-g5qg-w7wf

CVSS3: 9.1

github

больше 1 года назад

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.1.0.4 could allow an unauthenticated attacker to conduct an unauthorized access attack due to inadequate access control checks. A successful exploit could allow an attacker to access sensitive information and send unauthorized messages.