Mitel MiCollab Zero-Day Vulnerability Let Attackers Bypass Authentication
- С сайта: Vulnerability(cybersecuritynews.com)
- Вернуться к списку новостей
С сайта: Vulnerability(cybersecuritynews.com)
Security researchers have uncovered a critical zero-day vulnerability in Mitel MiCollab, a popular unified communications solution.
The flaw, which remains unpatched, allows attackers to perform arbitrary file reads on the server’s filesystem, potentially compromising sensitive information and system security.
The zero-day vulnerability, discovered by researchers at watchTowr, affects the ‘ReconcileWizard’ servlet in MiCollab.
Cybersecurity analysts at watchtower Labs discovered that this vulnerability is particularly alarming as it doesn’t require authentication to exploit, significantly increasing the risk to organizations using affected versions of MiCollab.
The researchers reported the issue to Mitel on August 26, 2024, but as of December 5, 2024, no patch has been released.
Technical Analysis
While the newly discovered zero-day doesn’t yet have a CVE identifier, it follows two recently patched vulnerabilities in MiCollab:
The latter, CVE-2024-41713, carries a critical CVSS score of 9.8, highlighting the severe nature of security issues affecting the platform.
As Mitel has not yet released a patch for the zero-day vulnerability, organizations using MiCollab are advised to implement immediate mitigations:
This incident underscores the ongoing security challenges faced by enterprise collaboration platforms. It also highlights the importance of prompt vulnerability disclosure and patching by vendors.
Mitel has stated plans to patch the vulnerability in the first week of December 2024. However, until a fix is released and applied, MiCollab users remain at risk.
Organizations are strongly encouraged to implement the recommended mitigations and stay vigilant for any signs of exploitation attempts.
#Cyber_Security_News #Vulnerability #cyber_security_news #vulnerability
Оригинальная версия на сайте:
Mitel MiCollab Zero-Day Vulnerability Let Attackers Bypass Authentication
Author: Tushar Subhra DuttaSecurity researchers have uncovered a critical zero-day vulnerability in Mitel MiCollab, a popular unified communications solution.
The flaw, which remains unpatched, allows attackers to perform arbitrary file reads on the server’s filesystem, potentially compromising sensitive information and system security.
The zero-day vulnerability, discovered by researchers at watchTowr, affects the ‘ReconcileWizard’ servlet in MiCollab.
Cybersecurity analysts at watchtower Labs discovered that this vulnerability is particularly alarming as it doesn’t require authentication to exploit, significantly increasing the risk to organizations using affected versions of MiCollab.
The researchers reported the issue to Mitel on August 26, 2024, but as of December 5, 2024, no patch has been released.
Technical Analysis
While the newly discovered zero-day doesn’t yet have a CVE identifier, it follows two recently patched vulnerabilities in MiCollab:
- CVE-2024-35286: An SQL injection flaw fixed on May 23, 2024
- CVE-2024-41713: An authentication bypass issue addressed on October 9, 2024
The latter, CVE-2024-41713, carries a critical CVSS score of 9.8, highlighting the severe nature of security issues affecting the platform.
As Mitel has not yet released a patch for the zero-day vulnerability, organizations using MiCollab are advised to implement immediate mitigations:
- Restrict access to the MiCollab server to trusted IP ranges or internal networks
- Implement firewall rules to prevent unauthorized external access
- Monitor logs for suspicious activity targeting the ReconcileWizard servlet
- Watch for unexpected access to sensitive files or configuration data
- If possible, disable or restrict access to the ReconcileWizard servlet
This incident underscores the ongoing security challenges faced by enterprise collaboration platforms. It also highlights the importance of prompt vulnerability disclosure and patching by vendors.
Mitel has stated plans to patch the vulnerability in the first week of December 2024. However, until a fix is released and applied, MiCollab users remain at risk.
Organizations are strongly encouraged to implement the recommended mitigations and stay vigilant for any signs of exploitation attempts.
#Cyber_Security_News #Vulnerability #cyber_security_news #vulnerability
Оригинальная версия на сайте:
