Detections
Analytics
CVE-2021-27402
medium
Description
The SAS Admin portal of Mitel MiCollab before 9.2 FP2 could allow an unauthenticated attacker to access (view and modify) user data by injecting arbitrary directory paths due to improper URL validation, aka Directory Traversal.
References
https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0004