← Back

CVE-2024-55550

Published: Dec 10, 2024Modified: Jun 17, 2026CISA KEV

JSON object

Loading...
2.7
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Exploitability: 1.2 / Impact: 1.4
Source: NVD

Description

Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insufficient input sanitization. A successful exploit could allow the authenticated admin attacker to access resources that are constrained to the admin access level, and the disclosure is limited to non-sensitive system information. This vulnerability does not allow file modification or privilege escalation.

Affected (1)

Products: Mitel: Micollab
1 product
Micollab
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Up to 9.8.1.201

Timeline

No history available yet.