CVE-2020-36473

UCWeb UC 12.12.3.1219 through 12.12.3.1226 uses cleartext HTTP, and thus man-in-the-middle attackers can discover visited URLs...

Command injection

UCWeb UC 12.12.3.1219 through 12.12.3.1226 uses cleartext HTTP, and thus man-in-the-middle attackers can discover visited URLs...

CVE-2020-36473

CVE-2020-36473 affects UCWeb UC browser versions 12.12.3.1219–12.12.3.1226. The root cause is the use of plaintext HTTP, enabling man-in-the-middle attackers to discover the URLs visited by a user. All cited sources (NVD, Red Hat, CNNVD) confirm the affected product/version range and the resultin...

CVE-2020-36473: Cleartext Storage of Sensitive Information

UCWeb UC 12.12.3.1219 through 12.12.3.1226 uses cleartext HTTP, and thus man-in-the-middle attackers can discover visited URLs...

PT-2021-12057

Name of the Vulnerable Software and Affected Versions: UCWeb UC versions 12.12.3.1219 through 12.12.3.1226 Description: The issue allows man-in-the-middle attackers to discover visited URLs because the software uses cleartext HTTP. Recommendations: For versions 12.12.3.1219 through 12.12.3.1226,...

CVE-2021-32069

The AWV component of Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-the-Middle attack due to improper TLS negotiation. A successful exploit could allow an attacker to view and modify data...

CVE-2021-32068

The AWV and MiCollab Client Service components in Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-the-Middle attack by sending multiple session renegotiation requests, due to insufficient TLS session controls. A successful exploit could allow an attacker to modify applicatio...

Session fixation

The AWV and MiCollab Client Service components in Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-the-Middle attack by sending multiple session renegotiation requests, due to insufficient TLS session controls. A successful exploit could allow an attacker to modify applicatio...

CVE-2021-32069

The AWV component of Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-the-Middle attack due to improper TLS negotiation. A successful exploit could allow an attacker to view and modify data...

CVE-2021-32069

CVE-2021-32069 affects the Mitel MiCollab AWV component and is caused by improper TLS negotiation, enabling potential Man-In-The-Middle attacks. Affected are MiCollab installations prior to version 9.3, where an attacker could view and modify data in transit. The vulnerability is documented acros...

CVE-2021-32068

The AWV and MiCollab Client Service components in Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-the-Middle attack by sending multiple session renegotiation requests, due to insufficient TLS session controls. A successful exploit could allow an attacker to modify applicatio...

CVE-2021-32068

CVE-2021-32068 affects Mitel MiCollab components AWV and MiCollab Client Service prior to version 9.3. The vulnerability allows a Man‑In‑The‑Middle by sending multiple TLS session renegotiation requests due to insufficient TLS session controls, potentially enabling an attacker to modify applicati...

CVE-2021-31399

On 2N Access Unit 2.0 2.31.0.40.5 devices, an attacker can pose as the web relay for a man-in-the-middle attack...

Code injection

On 2N Access Unit 2.0 2.31.0.40.5 devices, an attacker can pose as the web relay for a man-in-the-middle attack...

CVE-2021-31399

On 2N Access Unit 2.0 2.31.0.40.5 devices, an attacker can pose as the web relay for a man-in-the-middle attack...

CVE-2021-31399

The CVE-2021-31399 issue affects 2N Access Unit 2.0 devices (version 2.31.0.40.5). An attacker can impersonate the web relay to perform a man‑in‑the‑middle attack, enabling potential credential exposure or session manipulation through a compromised web relay. Public details cover the affected dev...

PT-2021-19649

Name of the Vulnerable Software and Affected Versions: Mitel MiCollab versions prior to 9.3 Description: The issue allows an attacker to perform a Man-In-the-Middle attack due to improper TLS negotiation. A successful exploit could allow an attacker to view and modify data. Recommendations: For...

Mitel Networks MiCollab Trust Management Vulnerability

Mitel Networks MiCollab is a mobile application from Mitel Networks Canada that provides voice, video, messaging, audio conferencing and team collaboration for employees.A security vulnerability exists in versions of Mitel Networks MiCollab prior to 9.3, which stems from a component that could be...

CVE-2021-32069: Improper Certificate Validation

The AWV component of Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-the-Middle attack due to improper TLS negotiation. A successful exploit could allow an attacker to view and modify data...

PT-2021-19282

Name of the Vulnerable Software and Affected Versions 2N Access Unit 2.0 version 2.31.0.40.5 Description An attacker can pose as the web relay for a man-in-the-middle attack on the affected devices. Recommendations For 2N Access Unit 2.0 version 2.31.0.40.5, consider restricting access to the web...