CVE-2020-11797 - CVE House
Back to Database
Status published High CVE-2020-11797

An Authentication Bypass vulnerability in the Published Area of the...

Vulnerability Description

An Authentication Bypass vulnerability in the Published Area of the web conferencing component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an unauthenticated attacker to gain access to unauthorized information due to insufficient access validation. A successful exploit could allow an attacker to access sensitive shared files.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-11797

Credits & Attribution

No credits recorded in the NVD database.

References

More from mitel

View All →
CVE-2022-41326
The web conferencing component of Mitel MiCollab through 9.6.0.13 could...
Unknown 0
CVE-2022-41223
The Director database component of MiVoice Connect through 19.3 (22.22.6100.0)...
Unknown 0
CVE-2022-40765
A vulnerability in the Edge Gateway component of Mitel MiVoice...
Unknown 0
CVE-2022-36454
A vulnerability in the MiCollab Client API of Mitel MiCollab...
Unknown 0
CVE-2022-36453
A vulnerability in the MiCollab Client API of Mitel MiCollab...
Unknown 0

Affected Vendor

Affected Software

micollab audio\, web \& video conferencing
Vulnerable Versions:
0, 9.0

Timeline

Official Publish: August 26th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.