CVE-2020-25608: Input Validation
First published: Fri Dec 18 2020(Updated: )
The SAS portal of Mitel MiCollab before 9.2 could allow an attacker to access user credentials due to improper input validation, aka SQL Injection.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mitel MiCollab, MiVoice Business Express | <9.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for the Mitel MiCollab vulnerability?
The vulnerability ID for the Mitel MiCollab vulnerability is CVE-2020-25608.
What is the severity level of CVE-2020-25608?
The severity level of CVE-2020-25608 is high with a score of 7.2.
How does CVE-2020-25608 impact Mitel MiCollab?
CVE-2020-25608 impacts Mitel MiCollab by allowing an attacker to access user credentials through SQL injection due to improper input validation.
Which versions of Mitel MiCollab are affected by CVE-2020-25608?
Mitel MiCollab versions up to and excluding 9.2 are affected by CVE-2020-25608.
How can I fix CVE-2020-25608 for Mitel MiCollab?
To fix CVE-2020-25608 for Mitel MiCollab, it is recommended to upgrade to version 9.2 or higher.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/tags
- agent/event
- agent/description
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/mitel
- canonical/mitel micollab, mivoice business express