CVEvulnerability
CVE-2023-39290
4.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-08-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.9 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Description
A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through R19.3 SP3 (22.24.5800.0) could allow an authenticated attacker with elevated privileges to conduct an information disclosure attack due to improper configuration. A successful exploit could allow an attacker to view system information.
Affected configurations
• mitel mivoice connect (<= 22.24.5800.0)
References
- https://www.mitel.com/support/security-advisories Vendor Advisory
- https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-23-0012 Vendor Advisory
- https://www.mitel.com/support/security-advisories Vendor Advisory
- https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-23-0012 Vendor Advisory