Beveiligingsadvies

CVE-2018-5779

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2018-03-14 16:00:00
Laatst bijgewerkt 2024-08-05 05:40:51
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

A vulnerability in the conferencing component of Mitel Connect ONSITE, versions R1711-PREM and earlier, and Mitel ST 14.2, release GA28 and earlier, could allow an unauthenticated attacker to copy a malicious script into a newly generated PHP file and then execute the generated file using specially crafted requests. Successful exploit could allow an attacker to execute arbitrary code within the context of the application.