Mitel Product Security Advisory 24-0001

MiContact Center Business Information Disclosure Vulnerability

Advisory ID: 24-0001

Publish Date: 2024-02-29

Last Updated: 2024-03-05

Revision: 2.0



An information disclosure vulnerability has been identified in the legacy chat components of Mitel MiContact Center Business which, if successfully exploited, could allow a malicious actor to access sensitive information and potentially conduct unauthorized actions within the vulnerable component.

Mitel is recommending customers with affected product versions update to the latest release.


Affected Products


Risk Assessment

The risk of this vulnerability is rated as High. Refer to the product Security Bulletin(s) for additional statements regarding risk.


Mitigation / Recommended Action

Customers are advised to update their software to the latest versions and apply the available hotfix.

For additional information, contact Product Support.


Related CVEs / CWEs / Advisories



Revision History

Version Date Description
1.0 2024-02-29 Initial version
2.0 2024-03-05 Updated the CVE Number
Ready to talk to sales? Contact us.