Critical Mitel Flaw Lets Hackers Bypass Login Gain Full Access to MiVoice MX-ONE Systems
To fix a serious security vulnerability in MiVoice MX-ONE that might enable an attacker to get past authentication safeguards, Mitel has issued security patches.
According to an advisory issued by the company on Wednesday, an authentication bypass vulnerability has been found in the Provisioning Manager component of Mitel MiVoice MX-ONE. If successfully exploited, this vulnerability could enable an unauthenticated attacker to carry out an authentication bypass attack because of inadequate access control.
An attacker might be able to access user or administrator accounts in the system without authorization if this vulnerability is successfully exploited. With a CVSS score of 9.4 out of a possible 10.0, the deficiency has not yet been given a CVE identifier. MiVoice MX-ONE versions 7....