| Package | Affected versions | Patched versions |
|---|---|---|
| micollab | < 9.3 | 9.3 |
The AWV and MiCollab Client Service components in Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-the-Middle attack by sending multiple session renegotiation requests, due to insufficient TLS session controls. A successful exploit could allow an attacker to modify application data and state.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free