CVE-2020-11798: Path Traversal
First published: Wed Jun 10 2020(Updated: )
A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access arbitrary files from restricted directories of the server via a crafted URL, due to insufficient access validation. A successful exploit could allow an attacker to access sensitive information from the restricted directories.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mitel Micollab Audio\, Web \& Video Conferencing | <8.1.2.4 | |
| Mitel Micollab Audio\, Web \& Video Conferencing | >=9.0<9.1.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- vendor/mitel
- canonical/mitel micollab audio\, web \& video conferencing
- version/mitel micollab audio\, web \& video conferencing/9.0