CVE-2020-11798
moderate-risk
Published 2020-06-10
A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access arbitrary files from restricted directories of the server via a crafted URL, due to insufficient access validation. A successful exploit could allow an attacker to access sensitive information from the restricted directories.
Do I need to act?
!
78.1% chance of exploitation in next 30 days
EPSS score — higher than 22% of all CVEs
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
!
1 public exploit available
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.3/10
Medium
NETWORK
/ LOW complexity
Affected Products (1)
Micollab Audio\, Web \& Video Conferencing
Affected Vendors
References (6)
46
/ 100
moderate-risk
Severity
21/34 · High
Exploitability
20/34 · Moderate
Exposure
5/34 · Minimal