CVE-2022-36451: 
Mitel MiCollab vulnerability analysis and mitigation

A vulnerability was identified in the MiCollab Client server component of Mitel MiCollab through version 9.5.0.101. The vulnerability could allow an authenticated attacker to conduct a Server-Side Request Forgery (SSRF) attack. This issue was discovered by Shaquin Trifonoff of Lateral Security and was assigned CVE-2022-36451 (Mitel Advisory).

The vulnerability exists in the MiCollab Client server component and could allow an authenticated attacker to leverage connections and permissions available to the host server through Server-Side Request Forgery (SSRF). The issue was rated with a CVSS score of 8.8, indicating high severity (CISA Bulletin).

A successful exploitation of this vulnerability could allow an attacker to leverage connections and permissions available to the host server, potentially leading to unauthorized access to internal resources and services (NVD).

Mitel has released updates to address this vulnerability. Customers are advised to update to the latest version of MiCollab. For systems that cannot be immediately updated, customers should review the product Security Bulletins for additional mitigation strategies (Mitel Advisory).