CVE-2021-27402 | BDVDB-2026-158821 Detail

Description#

The SAS Admin portal of Mitel MiCollab before 9.2 FP2 could allow an unauthenticated attacker to access (view and modify) user data by injecting arbitrary directory paths due to improper URL validation, aka Directory Traversal.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.mitel.com/support/security-advisories
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0004

Exploit#

No public exploit known

History#

Version 12021-08-13Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.