CVE-2022-36452: 
Mitel MiCollab vulnerability analysis and mitigation

A vulnerability was identified in the web conferencing component of Mitel MiCollab through version 9.5.0.101, which could allow an unauthenticated attacker to upload malicious files. The vulnerability was discovered by Shaquin Trifonoff of Lateral Security and was disclosed on July 27, 2022 (Mitel Advisory).

The vulnerability exists in the web conferencing component of MiCollab and could allow upload of malicious files. A successful exploit could allow an attacker to execute arbitrary code within the context of the application (CERT-FR, Mitel Advisory).

If successfully exploited, this vulnerability could allow an attacker to execute arbitrary code within the context of the application, potentially leading to unauthorized access and control of the affected system (CISA Bulletin, Mitel Advisory).

Mitel has issued a new release of MiCollab and provided mitigations for earlier releases. Customers are advised to update to the latest version and review the product Security Bulletins. For additional assistance, customers should contact Mitel Product Support (Mitel Advisory).