7.5
CVSSv2

CVE-2021-26714

Published: 29/03/2021 Updated: 01/04/2021
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

The Enterprise License Manager portal in Mitel MiContact Center Enterprise prior to 9.4 could allow a user to access restricted files and folders due to insufficient access control. A successful exploit could allow an malicious user to view and modify application data via Directory Traversal.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

mitel micontact center enterprise

Github Repositories

Directory Traversal vulnerability in Enterprise License Manager portal in Mitel MiContact Center Enterprise before 9.4

CVE-2021-26714 Directory Traversal vulnerability in Enterprise License Manager portal in Mitel MiContact Center Enterprise before 94 nvdnistgov/vuln/detail/CVE-2021-26714#vulnCurrentDescriptionTitle wwwmitelcom/support/security-advisories/mitel-product-security-advisory-21-0003