CVE:CVE-2018-18819
CNNVD:CNNVD-201911-521
Mitel Networks MiCollab和Mitel Networks MiVoice Business Express都是加拿大Mitel Networks公司的产品。Mitel Networks MiCollab是一款为员工提供语音、视频、消息、音频会议和团队协作的移动应用程序。Mitel Networks MiVoice Business Express是一套实时通信解决方案。
Mitel Networks MiCollab和MiVoice Business Express中的web会议聊天组件存在安全漏洞。远程攻击者可利用该漏洞创建未授权会话。以下产品及版本受到影响：Mitel Networks MiCollab 7.3 PR6 (7.3.0.601) 及之前版本，8.0 (8.0.0.40) 版本至8.0 SP2 FP2 (8.0.2.202)版本；MiVoice Business Express 7.3 PR3 (7.3.1.302)及之前版本，8.0 (8.0.0.40)版本至8.0 SP2 FP1 (8.0.2.202)版本。
solution:Upgrade mitel micollab to a higher version than 7.3.0.601,8.0.2.202,and avoid the version [7.3,7.3.0.601],[8.0.0.40,8.0.2.202]; Upgrade mitel mivoice_business_express to a higher version than 7.3.1.302,8.0.2.202,and avoid the version [7.0,7.3.1.302],[8.0.0.40,8.0.2.202]