Mitel Product Security Advisory 20-0011

Mitel Product Security Advisory 20-0011

Mitel MiContact Center Business Multiple Security Vulnerabilities

Advisory ID: 20-0011

Publish Date: 2020-09-02

Last Updated: 2020-09-02

Revision: 1.0

Summary

Multiple vulnerabilities have been identified in Ignite portal of Mitel MiContact Center Business:

A local attacker could execute arbitrary scripts due to insufficient input validation, Cross-Site Scripting (XSS). Successful exploit could allow an attacker to gain access to the user session.

A local attacker could view system information due to insufficient output sanitization. Successful exploit could lead to the disclosure of sensitive information.

Mitel is recommending customers with affected product versions, update to the latest release.

Affected Products

Product NameProduct VersionSecurity BulletinLast Updated
MiContact Center BusinessMiContact Center Business 9.2.3.0 and earlier

20-0011-001
20-0011-002

 

2020-09-04

Risk Assessment

The risks for these vulnerabilities are rated from Low to Medium. Refer to the product Security Bulletins for additional statements regarding risk.

Mitigation / Recommended Action

Mitel has issued new releases of the affected software. Customers are advised to update their software to the latest versions.

Customers are advised to review the product Security Bulletin. For additional information, contact Product Support.

External References

N/A

Related CVEs / CWEs / Advisories

CVE-2020-24692

CVE-2020-24693

Revision History

VersionDateDescription
1.02020-09-04Initial Version

Stay One Step Ahead Get notifications of the latest security advisories sent right to your inbox every week!