7.5
CVE-2024-28069
- EPSS 0.57%
- Veröffentlicht 16.03.2024 06:15:13
- Zuletzt bearbeitet 02.06.2025 14:19:11
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to conduct an information disclosure attack due to improper configuration. A successful exploit could allow an attacker to access sensitive information and potentially conduct unauthorized actions within the vulnerable component.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mitel ≫ Micontact Center Business Version <= 10.0.0.4
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.57% | 0.428 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
CWE-922 Insecure Storage of Sensitive Information
The product stores sensitive information without properly limiting read or write access by unauthorized actors.
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-24-0001