cve-2020-11798

{
  "cvss": 0.0,
  "datePublished": "2024-01-22T00:00:00Z",
  "dateUpdated": "2024-01-22T00:00:00Z",
  "description": "A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access arbitrary files from restricted directories of the server via a crafted URL, due to insufficient access validation. A successful exploit could allow an attacker to access sensitive information from the restricted directories.",
  "dueDate": "",
  "id": "CVE-2020-11798",
  "kev_catalogs": [
    "vulncheck"
  ],
  "knownRansomwareCampaignUse": "Unknown",
  "product": "micollab_audio\\,_web_\\&_video_conferencing",
  "requiredAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",
  "severity": "HIGH",
  "source": "vulncheck_kev",
  "title": "Mitel micollab_audio\\,_web_\\&_video_conferencing Improper Limitation of a Pathname to a Restricted Directory",
  "vendor": "Mitel"
}