CVE-2024-47189: SQL Injection
The API Interface of the AWV (Audio, Web and Video Conferencing) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthenticated attacker to conduct SQL injection due to insufficient sanitization of user input. A successful exploit could allow an attacker with knowledge of specific details to access non-sensitive user provisioning information and execute arbitrary SQL database commands.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47189?
CVE-2024-47189 has been classified as a high severity vulnerability due to its potential for SQL injection and unauthorized access.
How do I fix CVE-2024-47189?
To fix CVE-2024-47189, it is recommended to update Mitel MiCollab to a version beyond 9.8 SP1 FP2 (9.8.1.201) that addresses the vulnerability.
Which versions of Mitel MiCollab are affected by CVE-2024-47189?
Mitel MiCollab versions up to and including 9.8 SP1 FP2 (9.8.1.201) are affected by CVE-2024-47189.
What kind of attack does CVE-2024-47189 allow?
CVE-2024-47189 allows attackers to conduct SQL injection attacks due to insufficient input sanitization.
Who can exploit CVE-2024-47189?
CVE-2024-47189 can be exploited by unauthenticated attackers with knowledge of SQL injection techniques.