CVE Vulnerability

CVE-2018-18819

A vulnerability in the web conference chat component of MiCollab, versions 7.3 PR6 (7.3.0.601) and earlier, and 8.0 (8.0.0.40) through 8.0 SP2 FP2 (8.0.2.202), and MiVoice Business Express versions 7.3 PR3 (7.3.1.302) and earlier, and 8.0 (8.0.0.40) through 8.0 SP2 FP1 (8.0.2.202), could allow creation of unauthorized chat sessions, due to insufficient access controls. A successful exploit could allow execution of arbitrary commands.

5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

5.3 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-18-0012 Vendor Advisory
https://www.mitel.com/support/security-advisories Vendor Advisory
Configurations

Configuration 1

cpe:2.3:a:mitel:mivoice_business_express:*:*:*:*:*:*:*:*
cpe:2.3:a:mitel:mivoice_business_express:*:*:*:*:*:*:*:*
cpe:2.3:a:mitel:micollab:*:*:*:*:*:*:*:*
cpe:2.3:a:mitel:micollab:*:*:*:*:*:*:*:*
Information

Published : 2019-11-12 02:15

Updated : 2019-11-14 03:40

NVD link : CVE-2018-18819

Mitre link : CVE-2018-18819

Products Affected
No products.
CWE
CWE-863