CVEvulnerability

CVE-2018-18819

5.3 MEDIUM Published 2019-11-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-11-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-863

Description

A vulnerability in the web conference chat component of MiCollab, versions 7.3 PR6 (7.3.0.601) and earlier, and 8.0 (8.0.0.40) through 8.0 SP2 FP2 (8.0.2.202), and MiVoice Business Express versions 7.3 PR3 (7.3.1.302) and earlier, and 8.0 (8.0.0.40) through 8.0 SP2 FP1 (8.0.2.202), could allow creation of unauthorized chat sessions, due to insufficient access controls. A successful exploit could allow execution of arbitrary commands.

Affected configurations

• mitel micollab (>= 7.3 <= 7.3.0.601) • mitel micollab (>= 8.0.0.40 <= 8.0.2.202) • mitel mivoice business express (>= 7.0 <= 7.3.1.302) • mitel mivoice business express (>= 8.0.0.40 <= 8.0.2.202)

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References