Improper access control

2020-09-2504:23:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.9%

JSON

Mitel MiCloud Management Portal before 6.1 SP5 could allow an attacker, by sending a crafted request, to retrieve sensitive information due to insufficient access control.

CPENameOperatorVersion
micloud_management_portaleq6.1
micloud_management_portalle6.0
micloud_management_portaleq6.1 sp4

Name	Operator	Version
micloud_management_portal	eq	6.1
micloud_management_portal	le	6.0
micloud_management_portal	eq	6.1 sp4

References

www.mitel.com/support/security-advisories

www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0010