PT-2020-13666 · Mitel · Mitel Micollab

Published 2020-08-26 · Updated 2021-07-21 · CVE-2020-13767

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mitel MiCollab versions prior to 9.1.332 for iOS

Description The issue is related to insufficient access control, which could allow an unauthorized user to access restricted files and folders. An exploit requires a rooted iOS device and, if successful, could allow an attacker to gain access to sensitive information.

Recommendations For versions prior to 9.1.332, update to version 9.1.332 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information on the device until the update is applied.

Fix

Related Identifiers

CVE-2020-13767

Affected Products

Mitel Micollab

References · 4

• https://osv.dev/vulnerability/CVE-2020-13767 · Vendor Advisory
• https://mitel.com/support/security-advisories · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-13767 · Security Note
• https://mitel.com/support/security-advisories/mitel-product-security-advisory-20-0008 · Vendor Advisory