CVE-2022-36454: 
Mitel MiCollab vulnerability analysis and mitigation

A vulnerability was identified in the MiCollab Client API of Mitel MiCollab through version 9.5.0.101. The vulnerability could allow an authenticated attacker to modify their profile and impersonate another user's name (NVD, Mitel Advisory). The vulnerability was discovered and reported in July 2022, with patches released by Mitel to address the issue.

The vulnerability exists in the MiCollab Client API component that handles user profile modifications. It has been assigned CVE-2022-36454 and affects MiCollab versions 9.5.0.101 and earlier, including versions bundled with MiVoice Business Express (Mitel Advisory).

A successful exploitation of this vulnerability could allow an authenticated attacker to impersonate another user by modifying their profile name, potentially leading to identity spoofing within the system (CERT-FR, CISA).

Mitel has released patches to address this vulnerability. Customers are advised to update to the latest version of MiCollab. For systems that cannot be immediately updated, customers should contact Mitel Product Support for additional guidance (Mitel Advisory).