Advisory ID: 17-0010
Publish Date: 2017-09-14
Multiple vulnerabilities have been identified and corrected in MiCollab and MiCollab AWV.
Various web application defects have been corrected in MiCollab and MiCollab AWV. These vulnerabilities, if unmitigated, could lead to the compromise of user credentials, database data, and session data, and allow a malicious actor to execute arbitrary system commands.
Please refer to the security bulletins below for details on the corrected vulnerabilities.
Security Bulletins are being issued for the following products:
|Product Name||Product Versions||Security Bulletin||Last Updated|
|MiCollab||7.3 PR2 (184.108.40.206) and earlier
7.2 (220.127.116.11) and earlier
7.1 (18.104.22.168) and earlier
|MiCollab AWV||6.3 PR1 (22.214.171.124) and earlier
6.2 (126.96.36.199) and earlier
6.1 (188.8.131.52) and earlier
The risk associated with these vulnerabilities in the noted products is considered medium to high.
Refer to product Security Bulletins for additional statements regarding risk.
Mitigation / Recommended Action
Mitel has issued new releases of the affected software applications. Customers are advised to update their software to the latest versions.
Refer to the associated Security Bulletin for solution information.
Related CVEs / CWEs / Advisories