CVE-2024-35287

A vulnerability in the NuPoint Messenger NPM component of Mitel MiCollab through version 9.8 SP1 9.8.1.5 could allow an authenticated attacker with administrative privilege to conduct a privilege escalation attack due to the execution of a resource with unnecessary privileges. A successful exploi...

CVE-2024-35287

Summary (CVE-2024-35287) : Mitel MiCollab's NuPoint Messenger component (versions through 9.8 SP1/9.8.1.5) contains a privilege-escalation flaw due to execution of a resource with unnecessary privileges, enabling an authenticated administrator to run arbitrary commands with elevated privileges. R...