CVE-2022-36454

2022-10-2500:00:00

mitre

www.cve.org

micollab

client api

vulnerability

unauthorized modification

profile parameters

0.001 Low

EPSS

Percentile

28.6%

JSON

A vulnerability in the MiCollab Client API of Mitel MiCollab through 9.5.0.101 could allow an authenticated attacker to modify their profile parameters due to improper authorization controls. A successful exploit could allow the authenticated attacker to impersonate another user’s name.