PT-2021-20174 · Mitel · Mitel Micontact Center Business

Published 2021-08-13 · Updated 2021-08-25 · CVE-2021-3352

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Mitel MiContact Center Business versions 8.0.0.0 through 8.1.4.1 Mitel MiContact Center Business versions 9.0.0.0 through 9.3.1.0

Description The issue is related to the improper handling of tokens in the Software Development Kit, allowing an unauthenticated attacker to access and modify user data without authorization.

Recommendations For versions 8.0.0.0 through 8.1.4.1, update to a version outside of this range to resolve the issue. For versions 9.0.0.0 through 9.3.1.0, update to a version outside of this range to resolve the issue.

Fix

Related Identifiers

CVE-2021-3352

Affected Products

Mitel Micontact Center Business

References · 4

• https://osv.dev/vulnerability/CVE-2021-3352 · Vendor Advisory
• https://mitel.com/support/security-advisories · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3352 · Security Note
• https://mitel.com/support/security-advisories/mitel-product-security-advisory-21-0002 · Vendor Advisory