ZeroHour

CVE-2024-42514

CVSS 3.1
8.1 high
EPSS
<1%p38
Published
()
Modified
Description

A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.1.0.4 could allow an unauthenticated attacker to conduct an unauthorized access attack due to inadequate access control checks. A successful exploit requires user interaction and could allow an attacker to access sensitive information and send unauthorized messages during an active chat session.

Vendors
mitel
Products
micontact center business
Weakness
CWE-284
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

In the news

No ingested article mentions this CVE yet.