The provisioning manager component of Mitel MiVoice MX-ONE through 7.6 SP1 could allow an authenticated attacker to conduct an authentication bypass attack due to improper access control. A successful exploit could allow an attacker to bypass the authorization schema.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mivoice_mx-one | Mitel | * | 7.6 (excluding) |
| Mivoice_mx-one | Mitel | 7.6 (including) | 7.6 (including) |
| Mivoice_mx-one | Mitel | 7.6-sp1 (including) | 7.6-sp1 (including) |