SB2022080806 - Multiple vulnerabilities in Mitel MiCollab
Published: August 8, 2022
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 4 secuirty vulnerabilities.
1) Server-Side Request Forgery (SSRF) (CVE-ID: CVE-2022-36451)
The disclosed vulnerability allows a remote attacker to perform SSRF attacks.
The vulnerability exists due to insufficient validation of user-supplied input in the MiCollab Client server component. A remote user can send a specially crafted HTTP request and trick the application to initiate requests to arbitrary systems.
Successful exploitation of this vulnerability may allow a remote attacker gain access to sensitive data, located in the local network or send malicious requests to other servers from the vulnerable system.
2) Arbitrary file upload (CVE-ID: CVE-2022-36452)
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to insufficient validation of file during file upload in the web conferencing componen. A remote attacker on the local network can upload a malicious file and execute it on the server.
3) Improper Authorization (CVE-ID: CVE-2022-36453)
The vulnerability allows a remote attacker to bypass authorization checks.
The vulnerability exists due to an incorrect authorization check in the MiCollab Client API. A remote user can control another extension number.
4) Improper Authorization (CVE-ID: CVE-2022-36454)
The vulnerability allows a remote attacker to bypass authorization checks.
The vulnerability exists due to an incorrect authorization check in the MiCollab Client API. A remote user can impersonate another user’s name.
Remediation
Install update from vendor's website.
References
- https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0006
- https://www.mitel.com/-/media/mitel/file/pdf/support/security-advisories/security-bulletin-22-0006-002.pdf
- https://www.mitel.com/-/media/mitel/file/pdf/support/security-advisories/security-bulletin-22-0006-001.pdf
- https://www.mitel.com/-/media/mitel/file/pdf/support/security-advisories/security-bulletin-22-0006-003.pdf