Unrated severityNVD Advisory· Published Jun 10, 2020· Updated Aug 4, 2024

CVE-2020-11798

Description

A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access arbitrary files from restricted directories of the server via a crafted URL, due to insufficient access validation. A successful exploit could allow an attacker to access sensitive information from the restricted directories.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mitel/MiCollab AWVdescription
Mitel/Micollabllm-fuzzy
Range: <8.1.2.4 or >=9.0 <9.1.3

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/171751/Mitel-MiCollab-AWV-8.1.2.4-9.1.3-Directory-Traversal-LFI.htmlmitre
www.mitel.com/-/media/mitel/file/pdf/support/security-advisories/security-bulletin-20-0005-01.pdfmitre
www.mitel.com/support/security-advisories/mitel-product-security-advisory-20-0005mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.036
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000