21 lines
884 B
JSON
Raw Normal View History

{
"id": "CVE-2024-41714",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-10-21T21:15:06.547",
"lastModified": "2024-10-21T21:15:06.547",
"vulnStatus": "Received",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the Web Interface component of Mitel MiCollab through 9.8 SP1 (9.8.1.5) and MiVoice Business Solution Virtual Instance (MiVB SVI) through 1.0.0.27 could allow an authenticated attacker to conduct a command injection attack, due to insufficient parameter sanitization. A successful exploit could allow an attacker to execute arbitrary commands with elevated privileges within the context of the system."
}
],
"metrics": {},
"references": [
{
"url": "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0021",
"source": "cve@mitre.org"
}
]
}