The AWV component of Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-the-Middle attack due to improper TLS negotiation. A successful exploit could allow an attacker to view and modify data.
The product does not validate, or incorrectly validates, a certificate.
Link | Tags |
---|---|
https://www.mitel.com/support/security-advisories | vendor advisory |
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0005 | vendor advisory |