CVE-2024-55550

Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker with administrative privileges to read local files within the system due to insufficient input sanitization. This vulnerability can be chained with CVE-2024-41713, which allows an unauthenticated, remote attacker to read arbitrary files on the server.— CISA KEV · shortDescription 원문

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.— CISA KEV · requiredAction 원문

위 문장은 CISA 가 미국 연방기관에 지시한 내용을 원문 그대로 옮긴 것입니다. 국내 조직에 그대로 적용되는 의무가 아니며, 우리가 덧붙인 판단도 아닙니다.

Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative privilege to conduct a local file read, due to insufficient input sanitization. A successful exploit could allow the authenticated admin attacker to access resources that are constrained to the admin access level, and the disclosure is limited to non-sensitive system information. This vulnerability does not allow file modification or privilege escalation.

약점 유형(CWE): CWE-22 CWE-22

참조 문서 3건 · 수집 2026-09-04 · 번역하지 않습니다 — 보안 문서의 오역은 조치를 바꿉니다.