LOGIN PORTAL
Americas
Europe
Oceania
Business Phone Systems
Collaboration
Contact Center
Phones & Accessories
Apps & Developers
Your Business Need
Your Industry
Your Business Size
Our Services
Our Products
Blog
About Mitel
Careers
Customer Success
Resource Center
Location: United Kingdom
Advisory ID: 21-0003
Publish Date: 2021-02-16
Last Updated: 2021-02-16
Revision: 1.0
The Enterprise License Manager portal in Mitel MiContact Center Enterprise could allow a user to access restricted files and folders due to insufficient access control. A successful exploit could allow an attacker to view and modify application data via Directory Traversal.
Credit is given to Nicolai Grødum from PricewaterhouseCoopers AS, for highlighting this issue and bringing this to our attention.
Mitel is recommending customers with affected product versions to update to the latest release.
Product Name | Product Version | Security Bulletin | Last Updated |
---|---|---|---|
MiContact Center Enterprise | MiContact Center Enterprise 9.3 SP3 and earlier | 21-0003-001 | 2021-02-16 |
The risk for this vulnerability is rated as High. Refer to the product Security Bulletins for additional statements regarding risk.
Mitel has issued new release of the affected software. Customers are advised to update their software to the latest version. Customers are advised to review the product Security Bulletin. For additional information, contact Product Support.
Version | Date | Description |
---|---|---|
1.0 | 2021-02-16 | Initial version |