CVE-2019-19607: SQL Injection
A SQL injection vulnerability in the web conferencing component of Mitel MiCollab AWV before 8.1.2.2 could allow an unauthenticated attack due to insufficient input validation for the session parameter. A successful exploit could allow an attacker to extract sensitive information from the database and execute arbitrary scripts.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-19607?
CVE-2019-19607 has been classified as a high severity vulnerability due to its potential to allow unauthenticated access to sensitive database information.
How do I fix CVE-2019-19607?
To fix CVE-2019-19607, it is recommended to upgrade Mitel MiCollab AWV to version 8.1.2.2 or later.
Which versions of Mitel MiCollab are affected by CVE-2019-19607?
CVE-2019-19607 affects Mitel MiCollab AWV versions prior to 8.1.2.2, including versions up to 8.0.2.301 and all versions between 8.1 and 8.1.1.11.
What kind of attack can exploit CVE-2019-19607?
CVE-2019-19607 can be exploited through SQL injection, allowing attackers to manipulate queries and access unauthorized data.
Is authentication required to exploit CVE-2019-19607?
No, CVE-2019-19607 can be exploited by an unauthenticated attacker due to insufficient input validation.