Mitel MiCollab API SQL Injection Vulnerability (MISA-2024-0026)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Name: MiCollab SQL Injection Vulnerability in the API Interface - Vulnerability ID: MISA-2024-0026 - Description: A SQL injection vulnerability exists in the API Interface of the Audio, Web and Video Conferencing (AWV) component of MiCollab. Due to insufficient validation of user input, unauthorized attackers can execute SQL injection attacks. 2. Vulnerability Impact: - Affected Versions: MiCollab 9.8 SP1 FP2 (9.8.1.201) and earlier versions - Solution: Upgrade to MiCollab 9.8 SP2 (9.8.2.12) or later. 3. Vulnerability Severity: - Severity: High (7.7) - CVSS 3.1 Base Score: AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H 4. Affected Product: - Product Name: MiCollab - Affected Versions: 9.8 SP1 FP2 (9.8.1.201) and earlier versions - Solution: Upgrade to MiCollab 9.8 SP2 (9.8.2.12) or later. 5. Mitigation Measures: - Recommendation: Users running affected versions should upgrade to a newer version. - Related Link: MiCollab Security Update CVE-2024-47189 - SQL Injection Vulnerability in the API Interface 6. Contact Information: - Support Contact: Mitel Technical Support - Sales Contact: 844-937-6483 - Technical Support Contact: 800-722-1301 This information helps users understand the details of the vulnerability, the affected product versions, the recommended solution, and how to contact technical support.

Goal Reached Thanks to every supporter — we hit 100%!

Mitel MiCollab API SQL Injection Vulnerability (MISA-2024-0026)