CVE-2020-13863

The SAS portal of Mitel MiCollab before 9.1.3 could allow an attacker to access user data by performing a header injection in HTTP responses, due to the improper handling of input parameters. A successful exploit could allow an attacker to access user information...

CVE-2020-13863

The CVE-2020-13863 entry concerns Mitel MiCollab’s SAS portal (pre-9.1.3) vulnerable to header injection in HTTP responses due to improper input handling. An attacker could exploit this to access user data. CVSS data in the NVD lists both a NETWORK attack with LOW complexity (v2) and HIGH impact ...