Sheldon Klassen

**Name of the Vulnerable Software and Affected Versions** Mitel MiCollab versions through 9.6.2.9 **Description** A vulnerability in the web conferencing component could allow an unauthenticated attacker to download a shared file via a crafted request, including the exact path and filename, due to improper authentication control. A successful exploit could allow access to sensitive information. **Recommendations** For versions through 9.6.2.9, consider restricting access to the web conferencing component until a patch is available. As a temporary workaround, avoid sharing sensitive files via the web conferencing component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.