CVE-2023-25597: Medium severity mitel micollab, mivoice business express vulnerability
A vulnerability in the web conferencing component of Mitel MiCollab through 9.6.2.9 could allow an unauthenticated attacker to download a shared file via a crafted request - including the exact path and filename - due to improper authentication control. A successful exploit could allow access to sensitive information.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-25597?
CVE-2023-25597 is a vulnerability in the web conferencing component of Mitel MiCollab through 9.6.2.9 that could allow an unauthenticated attacker to download a shared file via a crafted request.
How can an attacker exploit CVE-2023-25597?
An attacker can exploit CVE-2023-25597 by sending a crafted request to the web conferencing component of Mitel MiCollab, allowing them to download a shared file.
What is the severity of CVE-2023-25597?
CVE-2023-25597 has a severity rating of medium.
Which software versions are affected by CVE-2023-25597?
CVE-2023-25597 affects Mitel MiCollab versions up to and including 9.6.2.9.
Is there a fix for CVE-2023-25597?
Yes, it is recommended to upgrade to a version of Mitel MiCollab that is not affected by CVE-2023-25597.