PT-2020-15755 · Mitel · Mitel Micloud Management Portal

Published 2020-09-25 · Updated 2020-09-30 · CVE-2020-24592

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mitel MiCloud Management Portal versions prior to 6.1 SP5

Description The issue allows an attacker to view system information by sending a crafted request due to insufficient output sanitization.

Recommendations For versions prior to 6.1 SP5, update to version 6.1 SP5 or later to resolve the issue.

Fix

Improper Encoding or Escaping of Output

Weakness Enumeration

CWE-116

Related Identifiers

CVE-2020-24592

Affected Products

Mitel Micloud Management Portal

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-24592 · Security Note
• https://mitel.com/support/security-advisories · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-24592 · Vendor Advisory
• https://mitel.com/support/security-advisories/mitel-product-security-advisory-20-0010 · Vendor Advisory